Dolphins' Web sites hacked in advance of Super Bowl
123417
(InfoWorld) - The Web sites of the Miami Dolphins and Dolphin Stadium, host to Sunday's Super Bowl football game, have been hacked, and malicious code on those sites has been attempting to infect PCs for at least a week, security experts said Friday. The breach on the stadium site was discovered by Websense's automated tools on Jan. 26, but the engineers at the company were not alerted to the problem until this week, when Websense customers complained that they were unable to visit the site. The www.dolphinsstadium.com and www.miamidolphins.com sites are affected by the attack, as are mirror copies of those sites, such as www.proplayerstadium.com. Security experts strongly advise Web surfers to avoid these sites until the compromise is contained. "If you go to the [Dolphins'] Super Bowl Web site with a Web browser that's not running the latest and greatest patches from Microsoft, you could get exploited," said Dan Hubbard, Websense's senior director of security and technology research. Miami Dolphins spokesman George Torres said that the matter is being investigated. The Indianapolis Colts face the Chicago Bears in the National Football League's championship game, one of the most anticipated sporting events of the year in the U.S. The Dolphins' sites serve up malicious JavaScript code that exploits two known Windows vulnerabilities, Hubbard said. It then attempts to connect with a second Web server that installs a Trojan downloader and a password stealing program on the victim's computer. The Trojan program lets the attackers install malicious software at a later date, he said. The Web sites that downloaded the malicious softwareÂ are based in China and were operating on and off on Friday morning, according to Roger Thompson, chief technology officer with Exploit Prevention Labs The Microsoft flaws that were exploited by hackers on the sites were both patched by October, but the breach is significant, Thompson said. "It's a pretty big deal," he said via instant message. "A lot of people check out football stuff at work, and I bet lots of companies are not patched, even through October." The NFL's Superbowl.com Web site is not affected by the hack, Thompson said. Websense published an alert on the hack Friday morning, after first notifying the Miami Dolphins, Hubbard said.
387344
On 20 November 2004, a major malicious-code attack emerged targeting European Web sites via banner ads. This two-step attack exploits two previously identified security vulnerabilities: the Bofra (or IFRAME
435599
Clean up campaign bears fruit High-profile websites have cleaned up their act after a small team of security researchers documented how they were unwittingly helping phishing fraudsters.â¦
554468
A Connecticut businessman took his quixotic crusade against the New England Patriots to the Internet yesterday, launching a website to build support among season ticket holders for arbitration in ticket revocation disputes and the ability to transfer tickets to a friend or family member.
3099
Also: Vigilante hackers target the wrong guy. See what people are saying on News.com Extra.
14529
Blog: Feature designed to dial Web page phone numbers is subject to cross-site scripting attack.
87628
Some Web sites are now offering surfers the chance to download free &quot;phishing kits&quot; containing all the graphics, Web code and text required to construct the kind of bogus Web sites used in Internet phishing scams.
506145
An overflow of stories concerning an alleged Firefox 1.5 exploit hit the Web over the weekend, emerging from an underground users' conference in San Diego.  But well into the morning, evidence that the exploit was either new or severe, remained sparse.
571255
Cybercrooks reprogram Dolphin Stadium Web site to load script that would attempt to exploit two Windows security holes.
3553
InfoWorld - Security experts are finding an increasing number of Web sites hosting malicious JavaScript code first&#160;detected on Super Bowl-related sites&#160;last week.
275950
Blog: Writer is duped for the first time ever by a phishing attack; feels violated and ashamed
176286
Servers that managed global internet traffic have been subjected to a concerted attack by hackers.
332998
A Republican Party Web site has been hacked, and for some time it has been spreading a variation of the long-running Storm Trojan horse to vulnerable visitors, a security researcher said Friday.
599984
Blog: Security researchers found PHP exploit code embedded in a GIF on a major image hosting site, slipping through the proverbial gates with the aid of a legitimate image at the beginning of the file, according to security researchers.
63702
TechWeb - Officials think the site's server was hacked sometime between Jan. 26 and Jan. 28.
175934
Some Super Bowl advertisers used their 30 seconds to drive visitors to their Web sites, while others made it difficult to find their online presence.
691931
Several major websites are brought down by the largest denial-of-service attacks ever staged. Compiled by Tony Long.