1,000 web domains compromised this month

1,000 web domains compromised this month, says Finjan
Brian Tinham 17/07/2008

More than 1,000 website domains have been compromised by a new round of mass web attacks this month.

Secure web gateway systems developer Finjan detected the attacks using its SecureBrowsing in-the-cloud security tool.

Yuval Ben-Itzhak, CTO of Finjan, says the toolkit being used by the attackers is aliased Asprox, and has been around for some years, gaining cybercrime popularity during 2007.

Itâ€™s designed to first search Google for webpages with the file extension .asp. Once found, it launches SQL Injection attacks to append a reference to the malware file, using the iframe tag, making it extremely efficient.

Each of the compromised domains included a reference to a malware that was served by more than 140 different domains across the Internet.

â€œSince the list of these malware serving domains increases every day, we believe this is just the tip of the iceberg for the scope and impact of this attack,â€ says Ben-Itzhak.

â€œAmong the compromised websites we found were those of respectable organisations, governmental institutes, healthcare organisations, as well as high-ranked websitesâ€¦ It requires proactive security solutions to safeguard organisations against these kinds of mass web attacks.â€
Click to expand...

http://www.mcsolutions.co.uk/article/14826/1000-web-domains-compromised-this-month-says-Finjan-.aspx

Log in or Sign up

1,000 web domains compromised this month

IDN Active Member

bobchrist Active Member

Log in or Sign up

1,000 web domains compromised this month

IDN Active Member

bobchrist Active Member

Useful Searches