[ insider_reports_insider ] White House Parody Site Pranked With Malware
David Utter Staff Writer
2008-05-21
Insider Reports RSS Feed
A malicious bit of code injection into whitehouse.org poses a concern because some people don't realize the authentic White House site is at whitehouse.gov.
 | | White House Parody Site Pranked With Malware |  |
Of course, Internet users who have online for a few years know what the dot-com version of whitehouse used to be, and we'll refrain from getting into that here. But the run parody site whitehouse.org has enjoyed due to people hitting its humor accidentally gained a dangerous punch line.
Security vendor Trend Micro said whitehouse.org ended up with a piece of malicious Javascript code in its pages. When triggered by viewing the site, the code tries to download a Trojan to the visitor's machine.
Code injection continues to increase as a problem through 2008. Web applications that fail to sanitize input enable websites to become conduits for malicious code.
Worse, this code propagates out to the Internet in the form of search results. Corrupted pages created by a site's search that feeds back to Google, for example, dump links to those pages into Google's search results for queries applying to them.
When someone stumbles across such a page and clicks through, the malicious code attempts to infect the visiting machine. It's a vicious cycle of corruption that does not seem to be improving.
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|