|
Compromised trouble: The availability of automated and often free attack tools is largely to blame for the surge in website compromises. According to a recent report, "It's the financial opportunity of a lifetime for would-be attackers. They get the tools for free, compromise sites with no coding skills required, and deposit backdoors & password stealers onto people's systems," it said, adding that attackers then auction off the stolen information. Some pages of retail giant WalMart's website were among the latest victims in the latest round of SQL injection attacks. Visitors shopping for an inexpensive art print could have encountered a malicious Shockwave Flash (SWF) file exploiting Adobe Flash Player vulnerabilities. WalMart quickly will try to fix the pages.
An unusual aspect in the attacks affecting websites is the number of malicious domains involved. Instead of just referencing a single malware host, the attacks might embed references to multiple malware domains. Researchers at an antivirus company released a report that showed a dramatic increase in web-based threats this year. In the first quarter, researchers discovered a newly infected web page every five seconds, three times more than last year. Seventy-nine percent of the sites were legitimate ones that were hacked. Eliminate security threats on your home or business computer, call Breached Systems, Inc. today! |
|