Feeds

Virus writers go for Olympic gold

Back-ends left open to superbly over-muscled Trojan

The Power of One eBook: Top reasons to choose HP BladeSystem

Websites carrying news of the Olympic games have been targeted in a new wave of SQL injection attacks. Vulnerabilities in sites including New Delhi Television Limited's NDTV.com have been booby-trapped with exploits designed to install malware onto users' computers.

NDTV is syndicating AFP’s Olympic content but has failed to secure its back-end databases, leaving the site vulnerable to attack. Other news sites have made similar mistakes, leading hackers to take advantage and push a variant of the Asprox botnet Trojan, net security firm Sophos reports. It adds that failures in setting up servers correctly by client sites, rather than problems with the AFP feed, are the root cause of the problem.

The Asprox attack toolkit has been around for months, but has more recently become associated with a spate of drive-by download attacks that started in May 2008. The tool allows hackers to search for vulnerable websites that allow malicious script to be injected into their content. These scripts typically redirect surfers to sites controlled by hackers that take advantage of browser vulnerabilities and the like to download malware payloads onto vulnerable Windows PCs.

The drive-by download attack method relies on a combination of SQL injection vulnerabilities (or similar) on victimised websites and unpatched Windows clients to spread botnet clients or other form of malware.

F-Secure notes a separate wave of SQL injection attacks targeting Chinese-language websites. Flaws involving the popular Baidu search engine and Flash player are being used to serve up a Trojan design to steal the passwords of online games, it reports.

Olympics hackers going for the big medals are also aiming to ensnare victims using the more traditional method of infected email attachment. Files in circulation posing as a PowerPoint presentation on Olympic venues in Beijing are infected with backdoor code, McAfee warns. Panda Security adds that this malware dials home to a Chinese IP address in order to send back data harvested from infected machines. ®

Designing a Defense for Mobile Applications

More from The Register

next story
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
Putin: Crack Tor for me and I'll make you a MILLIONAIRE
Russian Interior Ministry offers big pile o' roubles for busting pro-privacy browser
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.