Hackers seed malware on Indian anti-virus site
Who guards the guards?
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Hackers planted malicious script on the site of an Indian anti-virus firm this week. The website of AVsoft Technologies was attacked by unidentified miscreants in order to distribute a variant of the Virut virus.
AVsoft Technologies makes the SmartCOP antivirus package. One of the download pages of the site was boobytrapped with malicious code that used the infamous iFrame exploit to push copies of the Virut virus onto visiting unpatched (or poorly patched) Windows PCs.
The technique is a popular method for turning the websites of legitimate organisations in sites for drive-by malware downloads. Virut opens up a backdoor on infected PCs, allowing hackers to download and run other malware (or anything else they fancy) onto infected computers.
The compromise of AVsoft's site came to light via a post on a full disclosure mailing list on Thursday. It's unclear whether of not AVsoft has since purged its site (which remains available) of nasties. ®
COMMENTS
Paranoid
Is this perhaps the first attempt to infiltrate an AV vendor’s development environment and leave a legacy for years to come?
It looks like a virus, smells like a virus....
Bah!
Adopt the Glock internet security model; a Glock does not have a safety, you pull the trigger or you don't.
And the obligatory conspiracy theory...
...is that this was the work of US-based antivirus companies like Trend or McAffee, who could have sabotaged the site in protest at these third-world countries stealing all the programming jobs and working for 5c per hour. Or simply to discredit a foreign rival. Or something.
Mine's the one with the tinfoil beanie, poncho, gauntlets, facemask, leggings and socks...
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
