URL shortening service has links hacked

**Glaswegian** · 06-18-2009, 12:52 PM

The Cli.gs URL-shortening service yesterday reported that an attacker managed break in via a software security hole and take over 2.2 million URL links.

The Cli.gs service works like TinyURL to convert a long URL into a short link that is easier to use in e-mails, IMs and other messages. And lucky for Cli.gs users, this attack doesn't appear to have been intended to infect hapless surfers.

According to security company Sophos, the hacked links took visitors to an Orange County Register blog posting on Twitter hashtags. Anti-virus maker Kaspersky confirmed there was "No malicious code has been found on that particular page," and suggests the hacker meant to show the site was vulnerable to attack but not harm PCs.

According to the Cli.gs post, cligs editing is currently disabled to prevent further hijacks using the same security hole, and the site is in the process of restoring links from a backup. However, the latest backup is from May, so links created since then may have been lost, per the post.

Cli.gs, TinyURL and URL-shortening services in general are pulling in plenty of hacker attention. While this particular break-in doesn't appear to be malicious, crooks have used such services to obfuscate phishing links and other attacks.

http://www.techworld.com/security/ne...&NewsID=117599

sjb007 · 06-22-2009, 10:54 AM

Firefox users can use an addon called LongURL Mobile Expander to see the full links url before you click them, thus helping you prevent infection from any malicious placed links. This addon can be found here - LongURL Mobile Expander

More information about the tool itself is available from the authors web page here LongURL

06-18-2009, 12:52 PM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,119 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	URL shortening service has links hacked The Cli.gs URL-shortening service yesterday reported that an attacker managed break in via a software security hole and take over 2.2 million URL links. The Cli.gs service works like TinyURL to convert a long URL into a short link that is easier to use in e-mails, IMs and other messages. And lucky for Cli.gs users, this attack doesn't appear to have been intended to infect hapless surfers. According to security company Sophos, the hacked links took visitors to an Orange County Register blog posting on Twitter hashtags. Anti-virus maker Kaspersky confirmed there was "No malicious code has been found on that particular page," and suggests the hacker meant to show the site was vulnerable to attack but not harm PCs. According to the Cli.gs post, cligs editing is currently disabled to prevent further hijacks using the same security hole, and the site is in the process of restoring links from a backup. However, the latest backup is from May, so links created since then may have been lost, per the post. Cli.gs, TinyURL and URL-shortening services in general are pulling in plenty of hacker attention. While this particular break-in doesn't appear to be malicious, crooks have used such services to obfuscate phishing links and other attacks. http://www.techworld.com/security/ne...&NewsID=117599 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

06-22-2009, 10:54 AM	#2 (permalink)
sjb007 Analyst, Security Team Join Date: Dec 2007 Location: Lincoln UK Posts: 2,227 OS: Windows 7 Premium x64 My System	Re: URL shortening service has links hacked Firefox users can use an addon called LongURL Mobile Expander to see the full links url before you click them, thus helping you prevent infection from any malicious placed links. This addon can be found here - LongURL Mobile Expander More information about the tool itself is available from the authors web page here LongURL __________________ If we have helped you then please consider donating Proud Member of ASAP & UNITE Since 2007