Feeds

Online gamers targeted in Korean MSN hack attack

Third party, hack and theft

  • alert
  • submit to reddit

3 Big data security analytics techniques

More details have emerged about a hacking attack that left MSN's South Korean portal booby trapped with password-pinching malware. The attack targeted subscribers to Lineage, an online game with 4m users, largely in Asia. It's unclear how many users were clobbered by the assault. Police and Microsoft specialists have begun an investigation into the attack.

The site - news.msn.co.kr - is back online following a clean-up operation that removed malware planted on the news pages of the portal. Microsoft is blaming the firm that run the site for failing to apply security patches that would have frustrated the attack. The security breach came to light during a routine security scan by net security firm Websense on Sunday May 29. A similar check on May 27 revealed nothing untoward. Microsoft patched the flaw after the Bank Holiday weekend leaving a minimum three day window of exposure, AP reports.

Websense reports that the malicious code attempted to exploit multiple JavaScript, IE, and other Microsoft vulnerabilities to download a Trojan (called Lineage.dll) onto the PCs of surfers with vulnerable computers visiting the site. "The attempts were launched through an invisible, embedded iframe on the front page of MSN NEWS Korea. Merely visiting the site with a vulnerable browser was enough to become infected, which occurred without the user's knowledge," it added.

Microsoft told AP it hadn't recorded an increase in complaints from subscribers to the $15 a month game following the break-in. ®

Related stories

Botnet used to boost online gaming scores
Onliner gamer stabbed over 'stolen' cybersword
Bofra exploit tied to 'massive botnet'
MS UK 0wn3d by hackers. Again

3 Big data security analytics techniques

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
Arts and crafts store Michaels says 3 million credit cards exposed in breach
Meanwhile, Target investigators prepare for long process in nabbing hackers
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.