Yet another new malware attack

Yet another new malware attack Rogue JavaScript on Websites

#1 frankp316

Forum Addict

Group: Members
Posts: 1,714
Joined: 20-May 07

Posted 02 June 2009 - 08:27 PM

From CNet.

Quote

About 40,000 Web sites appear to have been compromised with rogue JavaScript code that redirects Web surfers to a fake Google Analytics site, after which they get passed onto a site that tries to exploit Internet Explorer or Firefox vulnerabilities to infect that PC with malware, according to a Websense researcher quoted by Computerworld. Just for good measure, if the site can't find a browser vulnerability, it tries to trick the user into downloading a Trojan.

http://news.cnet.com/8301-1009_3-10255226-...g=2547-1_3-0-20

Made title more descriptive and added informative paragraph from article. ~ OB

This post has been edited by Orange Blossom: 08 June 2009 - 12:17 PM

#2 Please Help Us

Member

Group: Members
Posts: 147
Joined: 31-January 09

Posted 03 June 2009 - 04:19 AM

Its like every other day we see one of these....
:thumbsup:

Thanks for keeping up informed though.

#3 Swordie

Distinguished Member

Group: Members
Posts: 789
Joined: 24-February 09
Gender:Male
Location:Miami, Florida

Posted 05 June 2009 - 01:40 PM

Theres that other one, called Gumblar, which sounds severe aswell..

Who said I couldn't have everything?

#4 Layback Bear

Forum Addict

Group: Members
Posts: 1,842
Joined: 12-September 06
Gender:Male
Location:Northern Ohio

Posted 28 June 2009 - 10:15 PM

Sun micro syatems don't seam to care, they never do any thing about it. I don't really know its a Sun micro problem or a Google problem. We still have a security problem with Java in Adobe and it's been there a long time.

#5 Papakid

Guru at being a Newbie

Group: Malware Response Team
Posts: 6,019
Joined: 08-April 04
Gender:Male

Posted 03 July 2009 - 12:39 AM

Layback Bear, on Jun 28 2009, 10:15 PM, said:

Don't confuse JavaScript with Java or the Java runtime environment. They are two separate things.
http://en.wikipedia.org/wiki/Javascript

Altho there is a relationship there, JavaScript was developed by Netscape. It is just a scripting language, so even if Sun did develop the language, they have no control over what the bad guys do with it. The blame rests solely on the shoulders of the perpetrators, not Sun or Google.

There are other reasons to yell at Sun, but this is not a bug or unpatched vulnerability in their runtime environment, so they don't deserve it in this case. :thumbsup:

And I may be obliged to defend
Every love every ending
Or maybe there's no obligations now,
Maybe I've a reason to believe
We all will be received
In Graceland--Paul Simon