Feeds

Virus writers go for Olympic gold

Back-ends left open to superbly over-muscled Trojan

Choosing a cloud hosting partner with confidence

Websites carrying news of the Olympic games have been targeted in a new wave of SQL injection attacks. Vulnerabilities in sites including New Delhi Television Limited's NDTV.com have been booby-trapped with exploits designed to install malware onto users' computers.

NDTV is syndicating AFP’s Olympic content but has failed to secure its back-end databases, leaving the site vulnerable to attack. Other news sites have made similar mistakes, leading hackers to take advantage and push a variant of the Asprox botnet Trojan, net security firm Sophos reports. It adds that failures in setting up servers correctly by client sites, rather than problems with the AFP feed, are the root cause of the problem.

The Asprox attack toolkit has been around for months, but has more recently become associated with a spate of drive-by download attacks that started in May 2008. The tool allows hackers to search for vulnerable websites that allow malicious script to be injected into their content. These scripts typically redirect surfers to sites controlled by hackers that take advantage of browser vulnerabilities and the like to download malware payloads onto vulnerable Windows PCs.

The drive-by download attack method relies on a combination of SQL injection vulnerabilities (or similar) on victimised websites and unpatched Windows clients to spread botnet clients or other form of malware.

F-Secure notes a separate wave of SQL injection attacks targeting Chinese-language websites. Flaws involving the popular Baidu search engine and Flash player are being used to serve up a Trojan design to steal the passwords of online games, it reports.

Olympics hackers going for the big medals are also aiming to ensnare victims using the more traditional method of infected email attachment. Files in circulation posing as a PowerPoint presentation on Olympic venues in Beijing are infected with backdoor code, McAfee warns. Panda Security adds that this malware dials home to a Chinese IP address in order to send back data harvested from infected machines. ®

Beginner's guide to SSL certificates

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.