[ insider_reports_insider ] Malware Pummels Italian Websites
David Utter Staff Writer
2007-06-19
Insider Reports RSS Feed
A major attack in Europe has hit sites in Italy particularly hard, with cracked websites now hosting code leading to drive-by malware downloads.
 | | Malware Pummels Italian Websites |  |
Many of the sites in Italy reside at one of Italy's biggest hosting providers. A report at the TrendLabs blog said a variety of legitimate sites have been targeted.
Those sites include ones for tourism, entertainment, and hotels, among others. Trend Micro, which operates the TrendLabs blog, claimed it has identified 1,174 Italian sites affected by criminal hackers.
Once cracked, these sites have an IFRAME tag placed on their pages. This tag contains the malicious code that triggers the offending downloads once someone visits the site.
A redirection sends the site visitor to another IP address. From there, one of several attack options could take place.
"On initial testing, TrendLabs researchers observed that this malicious JavaScript appears to be 'browser-aware' in that it can choose which vulnerability to take advantage of depending on the browser," the report said.
Websense noted that the attacks have reached outside Italy and affected users in other countries. Outside of Italy, users in Spain and the United States have been infected via the malicious IFRAME code.
Also, Websense claimed its research has found over 10,000 sites containing that code and pointing back to the hub server delivering the exploits.
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|