Criminals spread Windows exploit via Web host
97619
(InfoWorld) - Attackers have targeted the zero-day VML vulnerability on an unknown number of Windows-based machines, using a layered approach that first involved exploiting a hole in cpanel, an application that's popular with Web hosting services. AccordingÂ to posts on the support forum of HostGator, criminals accessed the company's servers using the cpanel hole, which was also a zero-day vulnerability. Once in, they planted code on many of the Web sites of HostGator's customers. End users who used Internet Explorer to visit those sites and had not followed work-around procedures were then infected with a virus, which attacks vector markup language in Windows. "The person or group that did this is very intelligent, and obviously knows how to plan a big attack," a HostGator official wrote in the forum. "Since this exploit could have worked on anyone running cpanel it had nothing to do with how secure we were. We suspect it was done by someone in china as we have a small piece of information supporting this." HostGator says the vulnerability in cpanel has been patched. The attack demonstrates the growing sophistication of computer attacks. According to HostGator, the cpanel vulnerability was discovered about a month ago, leading officials to speculate that the attackers waited for a zero-day to emerge before exploiting it.ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
384130
Hackers could exploit the vulnerabilities to launch DOS attacks and bypass user authentication on the servers.
712335
Unpatched Windows systems face more security dangers after it has been discovered that new exploits are possible via malicious Web pages and e-mail messages.
221404
Millions of computer users are at risk of attack because flaws in the way Windows handles some images.
236014
A new Trojan horse modifies infected PC's hosts file to replace Google text ads with ads from another source.
334880
A new family of worms which uses an unpatched vulnerability in Internet Explorer is spreading widely across the net.
703103
Hackers co-opted several popular Web sites including comedycentral.com over the weekend, using them to infect thousands of computers with a virus that can be used to steal passwords, bank accounts and other personal information. -washingtonpost.com
467572
InfoWorld - Online criminals have launched a widespread Web attack that has turned tens of thousands of legitimate Web sites into weapons, security vendors said Monday.
480693
Popular Web sites like MySpace and Photobucket has banner ads containing malicious code that could lead to the compromise of a computer.
430066
During the course of this weekend, hackers found an ingenious way to attack Microsoftâs ubiquitous Internet Explorer: compromise an ad networkâs servers.
573269
Virus hijacks PCs and uses them to send short message spam to mobile phones.
406752
A researcher has posted exploit code that attackers can use to hijack Windows machines via Yahoo Inc.'s Messenger instant messaging software.
640197
A clever Windows virus called Bofra has started circulating on the net.
309640
Malicious hackers are seeding Internet news groups that traffic in pornography with JPEG images that take advantage of a recently disclosed security hole in Microsoft&#39;s software, according to warnings from antivirus software companies and Internet
172429
Fast-moving pest exploits site, player holes to steal passwords.
735246
Malware was being deployed as a Trojan Horse that attempts to disable anti-virus programs, modify registry keys, download additional files, and log keystrokes when connecting to banking websites.
312110
AS WE PREDICTED last week after a weekend free time, hackers have come up with a method of exploiting the latest hole in Microsoft Windows.