Feeds

Blackhole exploit posted on US Postal Service site

Return to sender of Spotify tainted ads pathogen

Intelligent flash storage arrays

The US Postal Service has pulled down a site hosting malicious code that was earlier used in a sophisticated multi-stage attack featuring the Blackhole Exploit kit.

The infected site - http://ribbs.usps.gov - which is involved in the delivery of USPS's business mail-focused barcode-based Intelligent Mail services - was infiltrated with malicious JavaScript. This malicious script redirected through a relay of other sites to an attack portal.

The attack portal displays a sneaky 404 Page Not Found error message while actually delivering live malicious code.

The drive-by download attack was ultimately aimed at using software vulnerabilities to install Trojans onto the machines of surfers visiting the particular USPS domain the miscreants managed to compromise.

Last week the same Blackhole Exploit kit infested the website of Worldfest, a Houston, Texas music festival, cloud security firm zscalar reports. The same Blackhole Exploit kit starred in the tainted ad compromise that affected ad-supported versions of Spotify late last month.

Although that attack ultimately punted scareware software, the exploit kit allows those with very little or no coding ability to deliver a hostile payload of their choice.

Zscalar has a good dissection of the latest attack, detected on Thursday, in a blog post here. ®

Remote control for virtualized desktops

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.