Net Faces New Attack - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
News

Net Faces New Attack

Hacked Web sites are infecting PCs with Trojan horses and keystroke loggers

A major Internet attack was under way last week, using malicious code to infect Web sites, and the servers and PCs that visit those sites. Several Web administrators from major companies said their Windows-based Web servers were compromised despite being up to date on security patches, security analysts report.

Web surfers are at risk of having their machines infected with Trojan horse applications, used to hijack computers, as well as keystroke loggers, which are capable of stealing personal information such as financial account numbers and passwords, security experts say.

Internet Explorer users who visited compromised Web sites were getting infected by a variety of vulnerabilities in the browser. There was no patch available for one of them, commonly known as ADODB, as of last week.

Daniel Frasnelli, manager of the technical assistance center for managed-security- services provider NetSec Inc., says the attack hit big E-commerce sites, including a major auction site, an auto-pricing site, and search-engine sites. "We all know these sites," he says, although he wouldn't provide names.

It wasn't clear how the attackers compromised the sites. "It'll take some considerable forensic examinations," says Alfred Huger, senior director of engineering for Symantec Corp.

Security experts were unclear about the motive behind the attack. Some say it can be traced to a Russian Web IP address of known spammers; others say it's designed to steal consumers' financial information.

Web surfers who visit affected sites are infected via Web-site objects that have malicious JavaScript code attached to them. The JavaScript then in the background contacts another Web site that inserts malicious software on the Web surfer's system.

Microsoft was investigating the attack and issued a statement saying some customers running unprotected versions of Internet Information Services 5.0, a component of Windows 2000 Server, were being targeted. Microsoft also urged customers to install the latest patches for Internet Explorer and to "utilize high security settings."

Most major antivirus firms have updated their antivirus software to spot and clean up computer systems infected with the back doors and keystroke loggers.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
State of the Cloud
State of the Cloud
Cloud has drastically changed how IT organizations consume and deploy services in the digital age. This research report will delve into public, private and hybrid cloud adoption trends, with a special focus on infrastructure as a service and its role in the enterprise. Find out the challenges organizations are experiencing, and the technologies and strategies they are using to manage and mitigate those challenges today.
Slideshows
IT Careers: Top 10 US Cities for Tech Jobs
Cynthia Harvey, Freelance Journalist, InformationWeek,  1/14/2020
Commentary
Predictions for Cloud Computing in 2020
James Kobielus, Research Director, Futurum,  1/9/2020
News
What's Next: AI and Data Trends for 2020 and Beyond
Jessica Davis, Senior Editor, Enterprise Apps,  12/30/2019
Register for InformationWeek Newsletters
Video
Current Issue
The Cloud Gets Ready for the 20's
This IT Trend Report explores how cloud computing is being shaped for the next phase in its maturation. It will help enterprise IT decision makers and business leaders understand some of the key trends reflected emerging cloud concepts and technologies, and in enterprise cloud usage patterns. Get it today!
White Papers
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll