Malicious JavaScript code detected on Super Bowl-related sites
691434
Security experts are finding an increasing number of Web sites hosting malicious JavaScript code first detected on Super Bowl-related sites.
123417
(InfoWorld) - The Web sites of the Miami Dolphins and Dolphin Stadium, host to Sunday's Super Bowl football game, have been hacked, and malicious code on those sites has been attempting to infect PCs for at least a week, security experts said Friday. The breach on the stadium site was discovered by Websense's automated tools on Jan. 26, but the engineers at the company were not alerted to the problem until this week, when Websense customers complained that they were unable to visit the site. The www.dolphinsstadium.com and www.miamidolphins.com sites are affected by the attack, as are mirror copies of those sites, such as www.proplayerstadium.com. Security experts strongly advise Web surfers to avoid these sites until the compromise is contained. "If you go to the [Dolphins'] Super Bowl Web site with a Web browser that's not running the latest and greatest patches from Microsoft, you could get exploited," said Dan Hubbard, Websense's senior director of security and technology research. Miami Dolphins spokesman George Torres said that the matter is being investigated. The Indianapolis Colts face the Chicago Bears in the National Football League's championship game, one of the most anticipated sporting events of the year in the U.S. The Dolphins' sites serve up malicious JavaScript code that exploits two known Windows vulnerabilities, Hubbard said. It then attempts to connect with a second Web server that installs a Trojan downloader and a password stealing program on the victim's computer. The Trojan program lets the attackers install malicious software at a later date, he said. The Web sites that downloaded the malicious softwareÂ are based in China and were operating on and off on Friday morning, according to Roger Thompson, chief technology officer with Exploit Prevention Labs The Microsoft flaws that were exploited by hackers on the sites were both patched by October, but the breach is significant, Thompson said. "It's a pretty big deal," he said via instant message. "A lot of people check out football stuff at work, and I bet lots of companies are not patched, even through October." The NFL's Superbowl.com Web site is not affected by the hack, Thompson said. Websense published an alert on the hack Friday morning, after first notifying the Miami Dolphins, Hubbard said.
536948
Blog: Thousands of Web sites worldwide now host links to malicious code servers.
466917
This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example.
747017
Mozilla is investigating hacker claims that the Web browser has a serious flaw in the way it handles JavaScript.
367211
Days after sample attack code for a yet-to-be-patched flaw surfaced, malicious sites are popping up that exploit the hole.
387344
On 20 November 2004, a major malicious-code attack emerged targeting European Web sites via banner ads. This two-step attack exploits two previously identified security vulnerabilities: the Bofra (or IFRAME
583626
Zango and cash In Brief A worm exploiting Javascript support within Apple's embedded QuickTime player has spread across the MySpace network.â¦
90728
A new variant of the Santy worm, which attacks Web pages usuing the PHP bulletin board software, appeared this week. Earlier variants used Google to find vulnerable Web pages; the new
625347
(InfoWorld) - Security experts are finding an increasing number of Web sites hosting malicious JavaScript code firstÂ detected on Super Bowl-related sitesÂ last week. Sites covering topics ranging from health care to government have been hacked to host the JavaScript, SANS Internet Storm Center Director Marcus H. Sachs wrote on the SANS blog, listing some of the hacked sites. "System administrators might want to check their network flow logs for any traffic to these sites and for any traffic to the five sites that hosted the hostile JavaScript," Sachs wrote. The attack targets two known vulnerabilities in Microsoft's Windows operating systems, for which patches were issued in April and January. Computers with unpatched software are vulnerable to the attack. If one of the hacked sites is visited, the JavaScript code directs the browser to a second Web server, based in China, and tries to install a Trojan Horse downloader and password-stealing program on the victim's computer. Initially, the exploit appeared isolated to Web sites related to U.S. football, as hackers tried to capitalize on the surge of traffic to sites concerning the Super Bowl sporting event, which was played on Sunday. The site of the Miami Dolphins team, and another site for its stadium, were hacked, although they were eventually cleaned up. Security company WebsenseÂ reported the problem on the stadium site on Friday. Websense recommended that users stay away from the affected sites until they had been cleaned up. Â
745224
Security experts uncovered yet another bug in Internet Explorer this week, one that could let attackers replace the content of any legit site with their own, making it possible to spoof critical pages such as e-bank account access log-in forms or credit
86222
In brief Exploit circulating for unpatched vuln
345464
php|architect has a new note about a few PHP vulnerabilities:
204228
An unpatched IE security flaw can install malicious software via rigged Web sites, including porn sites.
316177
An attack combining malicious codes on Web sites and end-user laziness could compromise millions of routers still configured with their out-of-the-box defaults.
524524
An attack utilizing a vulnerability in an ActiveX control for the popular RealPlayer media program may be spending in a more more dangerous fashion than anyone realized. Exploit code for the vuln has been found embedded in ads served up from a popular advertising site.
538641
Worried about catching viruses, spyware, or other malicious software while surfing the Web?