Web hack hits thousands of users

sjb007 · 11-11-2008, 01:05 AM

Up to 10,000 servers have been hot but by a massive hacking attack according to security vendor Kaspersky Lab.

hHackers have launched a massive web hacking campaign, putting malicious links on as many as 10,000 servers, security vendor Kaspersky Lab warned Friday.

"We're estimating that in the last two days alone, between 2,000 and 10,000 servers, mainly Western European and American ones, have been hacked," Kaspersky wrote on its website, "It's not yet clear who's doing this."

The attackers are most likely using compromised accounts on the websites or launching what's known as a SQL injection attack, where hackers trick the Web site's software into inadvertently running malicious commands.

The criminals add a line of JavaScript code onto the hacked sites that redirects victims to one of six servers. These sites, in turn, redirect the visitor to a server in China. That server can launch a variety of attacks, targeting known flaws in Firefox, Internet Explorer, Adobe's Flash Player and ActiveX, Kaspersky said.

If the victim's computer hasn't been patched, the attack code could install a variety of spyware and Trojan horse software, including one program designed to steal World of Warcraft passwords.

Registration is free, and gives you access to our white paper library, case studies & analysis, downloads & speciality areas, forums, and more.

We editorially select highlights of the latest, breaking IT news, most-read articles and expert insight, and deliver them to your inbox.

Techworld’s RSS feeds send the latest industry news, reviews & analysis direct to your desktop! Add to Netvibes

These attacks have become fairly common this past year, according to Roger Thompson, chief research officer with AVG Technologies. "These guys are pretty busy," he said via instant message. "We see them a lot."

Judging from their techniques and from his previous research, Thompson believes the attackers are college students based in China and that they may be the same group that notoriously hacked the websites of the Miami Dolphins and Dolphin Stadium ahead of the 2007 Super Bowl football championship.

Full article here - http://www.techworld.com/news/index....&NewsID=106885

Chr1$ · 11-12-2008, 05:20 AM

Not hackers.

Hackers are the good guys.

Probably just a bunch of lame *** Skidies, with to much time on their hands. Paying for privates.

11-11-2008, 01:05 AM	#1 (permalink)
sjb007 Analyst, Security Team Join Date: Dec 2007 Location: Lincoln UK Posts: 2,273 OS: Windows 7 Premium x64 My System	Web hack hits thousands of users Up to 10,000 servers have been hot but by a massive hacking attack according to security vendor Kaspersky Lab. hHackers have launched a massive web hacking campaign, putting malicious links on as many as 10,000 servers, security vendor Kaspersky Lab warned Friday. "We're estimating that in the last two days alone, between 2,000 and 10,000 servers, mainly Western European and American ones, have been hacked," Kaspersky wrote on its website, "It's not yet clear who's doing this." The attackers are most likely using compromised accounts on the websites or launching what's known as a SQL injection attack, where hackers trick the Web site's software into inadvertently running malicious commands. The criminals add a line of JavaScript code onto the hacked sites that redirects victims to one of six servers. These sites, in turn, redirect the visitor to a server in China. That server can launch a variety of attacks, targeting known flaws in Firefox, Internet Explorer, Adobe's Flash Player and ActiveX, Kaspersky said. If the victim's computer hasn't been patched, the attack code could install a variety of spyware and Trojan horse software, including one program designed to steal World of Warcraft passwords. Registration is free, and gives you access to our white paper library, case studies & analysis, downloads & speciality areas, forums, and more. We editorially select highlights of the latest, breaking IT news, most-read articles and expert insight, and deliver them to your inbox. Techworld’s RSS feeds send the latest industry news, reviews & analysis direct to your desktop! Add to Netvibes These attacks have become fairly common this past year, according to Roger Thompson, chief research officer with AVG Technologies. "These guys are pretty busy," he said via instant message. "We see them a lot." Judging from their techniques and from his previous research, Thompson believes the attackers are college students based in China and that they may be the same group that notoriously hacked the websites of the Miami Dolphins and Dolphin Stadium ahead of the 2007 Super Bowl football championship. Full article here - http://www.techworld.com/news/index....&NewsID=106885 __________________ If we have helped you then please consider donating Proud Member of ASAP & UNITE Since 2007

11-12-2008, 05:20 AM	#2 (permalink)
Chr1$ Registered User Join Date: Nov 2008 Posts: 14 OS: Windows xp sp 3+Red Hat Linux 6.2E	Re: Web hack hits thousands of users Not hackers. Hackers are the good guys. Probably just a bunch of lame *** Skidies, with to much time on their hands. Paying for privates.