Hacker Diverts Web Site to Porn Local Firm's Web Site Falls Prey to Hackers Hacker Diverts Web Site to Porn
128526
By Todd R. Brown  SOUTH SAN FRANCISCO -- Talk about working blue: A local venture- capital firm recently fell prey to a hacker who took over the company's Web site and directed viewers to several porn sites instead.
37595
INSPECTOR Hacker of the Yard has fingered the collar of a UK man suspected of stealing source code from Cisco Systems in May. Cyber plods from the Metropolitan Police Computer Crime Unit swooped on houses
181199
Interesting tidbit that was Slashdotted earlier - Netcraft has released an anti-phishing toolbar that leverages the enormous database of web sites the organization manages.
54944
When Google meets kink A moment of narcissism by a blogger who covers kink, multiple sex partners and other topics has uncovered a sophisticated attack that secretly installed malware on end user machines by compromising thousands of websites maintained by a large webhost and ginning search results on Google.â¦
558542
Easy-peasy-sleazy: A new piece of PHP code making the malware rounds can install a phishing site on a compromised server in about two minutes.
94093
An intruder could manipulate a flaw in how the browsers handle image files to see where the user has been surfing.
587711
Hackers could bypass security warnings and download malicious content.
360875
The Web site for Indian antivirus vendor AvSoft Technologies has been hacked and is being used to install malicious software on visitors&#39; computers, security researchers said Thursday.The download section of AvSoft&#39;s S-cop Web site hosts the malicious code, according to Roger Thompson, chief research officer with security vendor AVG. &quot;They let one of their pages get hit by an iFrame injection,&quot; he said. &quot;It shows that anyone can be a victim.... It&#39;s hard to protect Web servers properly.&quot;The technique used on the site has been seen in thousands of similar hacks over the past few months. The attackers open an invisible iFrame Window within the victim&#39;s browser, which redirects the client to another server. That server, in turn, launches attack code that attempts to install malicious software on the victim&#39;s computer.The malicious software is a variant of the Virut virus family.The iFrame pages are commonly used by Web developers to insert content into their Web pages, but because it is possible to create an invisible iFrame window, the technology is often misused by hackers as a way to silently redirect victims to malicious Web sites.AvSoft, based in New Delhi, sells an antivirus product called SmartCOP and has sold a second antivirus product called Smartdog. The company, which is not well-known in the U.S., also specializes in recovering data lost due to virus attacks. The company could not be reached for comment Thursday afternoon.That data recovery service could come in handy for some, as Virut is known as a &quot;parasitic infector&quot; virus that is extremely difficult to remove. &quot;It infects all of your programs on your local hard drives, and then it starts hitting your network drives as well the first time you run,&quot; Thompson said.Fortunately, the malware used to install Virut exploits only well-known bugs, meaning that users who are running antivirus software on fully patched systems will probably not be infected by the attack in its current state, security experts say.Nobody knows how the malware got onto the Web site in the first place. News of the hack was reported on the Full Disclosure security discussion list on Thursday.McAfee Security Research Manager Dave Marcus believes that the site was compromised by exploiting a Web programming error, most likely in the site&#39;s SQL or PHP code. Security experts say that criminals have written automated programs that scour the Web for these types of flaws and then automatically infect sites, making this an increasingly common problem.
111668
Hundreds of porn sites are surprising users with exploits via Mpack, the hacker toolkit featured in 'Italian Job' attacks.
758956
Hole could allow remote attackers to access your local search results.
201475
Tycho:  I understand he's posting these around his neighborhood, now, and I mean real Gabe, not the jpeg Gabe like you might see sur le web. If you did find it, I wouldn't bring it back to him. The most likely scenario is that he will assume that you're the one who stole it, and your "reward" will be a savage karate style maneuver delivered to your "sack of toys."
392900
Spammers are suspected of hacking into and downing Lycosâs anti-spam Web site just hours after it went live. The Web site is currently inaccessible and could also be the victim of a DDoS attack.
567558
(InfoWorld) - The good guys are taking a hit in the ongoing online war between the thugs who profit from phishing and malware, and those who work to stop them. For two weeks, Web sitesÂ such asÂ CastleCops.com, which offers help to those hit by malware and actively works to shut down malicious Web sites, have been under attack. In what's known as a DDoS (distributed denial of service), black hats are flooding CastleCops with a barrage of garbage data in an attempt to overwhelm the site and knock it offline. "It's the folks who are out there in the trenches getting hit," says Paul Laudanski, who founded CastleCops five and a half years ago Attack spreadsWhen the attack onÂ CastleCops.comÂ began on Aug. 29, Laudanski says, the site went down for a few hours as he scrambled to apply countermeasures. His site came back up, but the attack soon spread to other helpful sites such as 419eater.com, fraudwatchers.org, scam.com, scamfraudalert.com, and scamwarners.com. Most of these sites are currently unresponsive. When the hosting provider for another site, aa491.org, dropped the site because the attack became too much for the provider, CastleCops gave aa419.org a home. CastleCops went down again under the combined attack, but is back up again. The sites are all being hit byÂ botnets,Â corralled networks of malware-infected computers that can be issued commands by a central controller, or botherder. Botnets are most often used to send money-making spam, but they can also launch DoS attacks where each infected PC sends a steady stream of traffic at a victim site. CastleCops is shouldering the brunt of 20,000 bots as of today, and more than 1,000 additional bots join the fray each day. Mystery motiveLaundanski says he and others who work at these sites, many of which are not-for-profit, are still unsure about the attack's rationale. And he's likewise uncertain about whether it's one group or many behind it all. He's been able to gather some details, but doesn't want to share them while the threat continues and let his attackers know what he's been able to find out. But Paul Sop, CTO of Prolexic, a company that defends clients against DDoS attacks, says "the prevailing street theory is that these guys are having an effect." Their advice is helping malware or phishing victims, and their investigations are helping to shut down criminal operations."So the botnet guys are targeting them," he says. Security sites, including CastleCops, have been targeted in the past, but attacks are on the rise, Sop says. In the past five months, he says, there has been an increased focus on attacking organizations on the front lines who try to fight back against the crooks. Strengthened resolveBut according to Laudanski, who has started aÂ new online forumÂ documenting the ongoing battles, the attacks may backfire. "The criminals are in it for the money," he says. "It's a huge business for them. [But] we're in it for the feeling that we get being on the side of right." So this assault shows that "these sites are definitely doing something right," he says, "because we've got the attention of these scammers. It gives us greater resolve." PC WorldÂ is an InfoWorld affiliate.
90995
Also: Mysterious stone slab bears ancient writing. Read these stories and more from around the Web on News.com Extra.
394809
Private videos seem to be escaping to the internet in droves. Do we care? In Sex Drive Daily.
288540
Also: Dating faux-pas: Stealing other people's profiles. See what people are saying on News.com Extra.
408174
Firth and degredation Hackers turned the Forth Road Bridge website into a filth jamboree after breaking into its systems to plant script designed to redirect surfers to a Turkish site hosting malware.â¦Learn &amp; Contribute, Live &amp; Online - The Register Debates Green Computing