Trend Micro gets slashed in attack of the killer iframes
Trend Micro, please put down your bricks and step away from the glass house.
This week, researchers from the anti-virus provider uncovered at least two high-profile websites hacked so they try to infect visitors with some of the nastiest malware out there.
"Unfortunately, safe surfing measures can be useless as even the most trusted Web sites can be hacked to serve up malware," Trend Micro's JM Hipolito wrote on Monday when analyzing the attack on the Bloggies. Evidently, he didn't know just how correct he was.
A Trend Micro spokesman said the malicious iframes have already been removed and that steps have been taken to prevent the injection from happening again. He didn't have additional details. Evidently, Trend Micro is more eager to expound on iframe injections when they happen to other companies' sites.
As we reported earlier today, the mass infection causes the once-benign sites to turn against their visitors by attempting to install password loggers, backdoors and other types of malware on their machines. The attacks appear to be the handiwork of a single criminal gang, according to McAfee researchers, who first discovered the cluster of hacked sites. They are part of a growing preference of miscreants to spread malware using legitimate websites that have been compromised rather than through destinations specifically set up for that purpose.
They are only one of a rash of mass infections making the rounds at the moment. Netherlands-based researcher Dancho Danchev has been closely following a separate group of attacks that have succeeded in getting Google and other search engines to return malicious results with the unwitting help of Wired.com and other popular websites. To boost their search ratings, these sites record terms entered into their search boxes by readers and store them in a place where Google bots can read them. By plugging in search phrases with toxic iframes into the popular sites, the attackers cause Google to spit out malicious links that appear to lead to trusted websites.
Add to that the attacks on websites belonging to The Hives (warning: the infection was still active at time of writing, so don't visit unless you know what you're doing) and the Bloggies (we didn't check), and it's obvious miscreants have seized on a strategy they like.
And it's not hard to understand why. If even security providers like Trend Micro (and a few months back, Computer Associates) can't protect their visitors from these assaults, chances are good that plenty of others can't either.
The Attack of the Killer iframes may not be much of a movie, but it's box-office success has all but guaranteed a string of sequels. ®
Dunno about confused as I can't be bothered looking it up, but you are missing quirkafleeg's point I think. I usually say 'redundant' for PIN number and LCD display, but in this case a bunch of LCDs on the shelves for people to see is indeed a display of LCDs. Or LCD display if you will. Perhaps he should've used the Joke icon instead?
What he means is that it's a... tautology(?*)...
PIN Number = Personal Identification Number Number
LCD Display = Liquid Crystal Display Display (though you could have a display of such, but that would be a Liquid Crystal Display, display).
*I know the word I mean and used it recently, it just escapes me at the moment - unless I'm correct but confused.
So if I have this right, The Reg has a story about Phorm and Trend Micro one day, encouraging me to look at the Trend Micro site; possibly for the first time ever. Then the next day there's another story about Trend Micro infecting visitors to their site ? ... hmmmm....