Feeds

Euro 2008 sales site in drive-by download attack

Caught offside with Trojan downloader code

Intelligent flash storage arrays

Hackers have successfully planted malware on a website selling tickets for the upcoming Euro 2008 Championships.

The site of European ticket re-sale firm euroticketshop.com was infected by Trojan horse malware in a bid to infect soccer-loving surfers with insecure PCs. This drive-by malware style of attack is growing increasingly popular.

Visitors attempting to purchase tickets through the site were exposed to a malicious script which is embedded on some of its web pages. This malware (detected by net security firm Sophos as ObfJS-R) then attempts to download further items of malware from another remote website.

It's unclear at the time of writing whether euroticketshop.com has purged the infection. We dropped the site a note but are yet to hear back.

A growing number of legitimate web pages are now being compromised by crooks as they attempt to infect more computers. Sophos said it detects a new infected web page as often as once every 14 seconds. A large majority (83 per cent) of these infected web pages are hosed on legitimate sites.

Miscreants take advantage of large sporting events to increase the potency of their attacks. In 2007, the website of the Miami Dolphins, host of last year's Superbowl, was compromised in the days leading up to the event in order to infect visiting fans.

"This is not the first time that hackers have attempted to capitalise on sporting events, and unfortunately in the run up to the competition this summer, we're likely to see more sites like this being hacked, as well as other scams preying on football fans' fervour," said Graham Cluley, senior technology consultant at Sophos. ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.