Malicious JavaScript Allows Third-Party Control of UN, UK sites

Two attacks by injecting mass JavaScript into a number of Websites including one of the United Nations and several of the UK government with links leading to malware loaded servers suggest that they might be related, according to Internet security firm, Websense on April 22, 2008.

Websense reported that it observed clear resemblance between attacks launched in early April 2008 and those during the weekend of the third week of April 2008. Specifically, the company found that the same toolkit was used to implement these attacks.

However, the Web attackers are currently transformed to a different domain, which they are using to host their payload in the new attack. Researchers at Websense found that the compromised Websi...

» SPAMfighter News - 29-04-2008