Malware Hacks CA.com
In the first week of January, part of the website of Computer Associates (CA), security software vendor, was hacked. The hacked website redirected its visitors to a malevolent website of China. CA website was hacked in the way similar to the Dolphin Stadium website hacked in the year 2007. The website of Dolphin stadium infected all those visitors who visited website to seek information on Super Bowl football game.
The domain uc8010.com is laden with attack code which takes the privilege of recently deciphered vulnerability of the RealPlayer multimedia software. The attackers who have created this domain insert the code redirecting website visitors to the malicious software. These hackers have tens of thousands of hacked web pages to their credit.
The Chief Scientist and Founder of Fortify, Brian Chess, said that unconfirmed reports point that the CA.com's press section is being hosted by a third party organization. But the third party hosting doesn't make any difference to the visitors, who were redirected to a malicious website in China, as per the news published by Mcsolutions on January 8, 2008.
The hacking incident of CA website has raised question on the IT outsourcing. The security researchers of Fortify Founder said that this type of hacking incidences create embarrassment for the reputed companies like CA. The hacking is done by hiring paid criminal whose job is to install malware on personal computers.
Chess further claimed that the embarrassing act of hacking cites a perfect example of how criminals are leveraging trust of the people who confides in brand like Computer Associates to hold total control on the computers.
Related article: Malware Authors Turn More Insidious
» SPAMfighter News - 21-01-2008