Security firm tracks mass SQL injection attack

March 31, 2011

At least 380,000 web pages have been infected via SQL injection to serve rogue anti-virus programs, known as scareware, security firm Websense reported Thursday. The sites were injected with code that directs victims to a website called Liza Moon, which automatically redirects users to a notorious site serving fake anti-virus. Both domains currently are down, according to Websense. This latest round appears to be targeting iTunes URLs that are used to update podcasts. This is one of the largest mass SQL injection attacks that Websense has detected since that style of attack became popular in 2008 and 2009.

Dan Kaplan

Malware

Mongolian Skimmer obfuscated via Unicode in new skimming campaign

SC StaffOctober 11, 2024

Misconfigured Magento or OpenCart instances may have been targeted to facilitate the deployment of Mongolian Skimmer, which uses various event-handling methods to ensure extensive compatibility while hiding malicious activity with heavy Unicode character utilization.

Network Security

Raccoon infostealer mastermind pleads guilty in US court

Shaun NicholsOctober 10, 2024

A 28-year-old Ukranian man admitted to being the mastermind behind one of the most notorious pieces of malware on the internet.

Cryptocurrency with blurred city abstract lights background

Malware

Massive crypto-stealing malware operation hits Eurasia

SC StaffOctober 10, 2024

Malicious GitHub pages and YouTube videos containing links for purported cracked office software, automated trading bots, and game cheats, have been leveraged to facilitate the download of self-extracting password-protected archives.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news