10 March 2008

Hunters for the password to the online games attacked about 100 thousand sites

Tens of thousands of web sites of companies from Fortune 500, government agencies and public schools were infected with malicious code aimed at stealing passwords for online games.

More than 94 thousand virus infected URL that redirects users to a domain uc8010.com. IB-infected resources from Computer Associates, as well as sites owned by Virginia authorities, the city of Cleveland and Boston University.

"The range of objects that were infected, a very large - said Lendsmen Mary (Mary Landesman), a researcher from ScanSafe, a company that provides information on the malicious sites. - This is a real example of what we see every day. And it shows companies interested in a web presence, to take a hard look at the state of its security system. "

"Hackers were able to infect sites using SQL Injection" - tells Johannes Ullrich (Johannes Ullrich), the chief technologist Internet Storm Center. In injections included javascript that redirects users to other sites, says The Register. Vulnerabilities of these sites allow for malicious software to steal passwords from various online games.

No comments: