Microsoft gives details of massive web attack

[Computer Hope Admin]

On April 17, 2008, hundreds of thousands of pages on legitimate domains—including several at the United Nations and in the UK government—were attacked. Many of these sites ended up serving malware by redirecting users to malicious pages using JavaScript and IFRAMES. Users' PCs were loaded with a malware program that tried eight different exploits in an attempt to hijack the system.

Link

[Dias de verano]

Another reason to disable scripting. VBS wizards please note!

[homer]

No Script FTW!

[evilfantasy]

Hmm....

Microsoft Corp. denied the recent incident, in which more than half a million websites were hacked, was caused by vulnerabilities in its Web and SQL Server software, according to U.S. media reports Monday.

Full story.
2008/4/29 17:23:16 - Microsoft Denies Massive Security Incident