Stories
Slash Boxes
Comments
typodupeerror delete not in

Comments: 1 +-   Hundreds of Thousands of Microsoft Web Servers Hac-> on Friday April 25 2008, @08:44AM andrewd18

Submitted by andrewd18 on Friday April 25 2008, @08:44AM
security
andrewd18 writes "According to F-Secure, over 500,000 webservers across the world, including some from the United Nations and U.K. government, have been victims of a SQL injection. The attack uses an SQL injection to reroute clients to a malicious javascript at nmidahena.com, aspder.com or nihaorr1.com, which uses another set of exploits to install a trojan on the client's computer. As per usual, Firefox users with NoScript should be safe from the client exploit, but server admins should be alert for the server-side injection.

Brian Krebs has a decent writeup on his Washington Post Security Blog, Dynamoo has a list of some of the high-profile sites that has been hacked, and for fun you can watch some of the IIS admins run around in circles at one of the many IIS forums on the 'net."

Link to Original Source
submission

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
To follow foolish precedents, and wink With both our eyes, is easier than to think. - William Cowper