Thousands of Web Sites Stung by Mass Hacking Attack
1754 views 
Up to 40,000 Web sites have been hacked to redirect unwitting victims to another Web site that tries to infect PCs with malicious software, according to security vendor Websense.
The affected sites have been hacked to host JavaScript code that directs people to a fake Google Analytics Web site, which provides data for Web site owners on a site's usage, then to another bad site, said Carl Leonard, threat research manager for Websense.
Those Web sites have likely been hacked via a SQL injection attack, in which improperly configured Web applications accept malicious data and get hacked, Leonard said. Another possibility is that the FTP credentials for the sites have somehow been obtained by hackers, giving them access to the inner workings of the site. It appears the hackers are using automated tools to seek out vulnerable Web sites, Leonard said.
Yeah . this is true.. three
Yeah . this is true.. three of my websites been hacked and injected some iframe tags that contains links to malicious programs in all the index.html pages. Finally I've found a solution i.e change your existing FTP password and use SSH or SCP protocols for uploading files to the server. I hope this solution will be useful to others.
Kishore
www.washbas.in
Post new comment