A Russian security site is hawking services to help hackers managed legions of compromised web sites.
The web site iframeservices.net, first identified by security blogger Brian Krebs, was a paid service that would help manage infected web sites, alerting customers when their URLs were blacklisted by anti-virus, and seeking deeper within the sites for additional or root vulnerabilities.
It would also clean out erroneous FTP web site credentials and upload the client's malware to victim sites.
The web site boasted that the service worked on sites including WordPress, Joomla, vBulletin and “many others”.
Integrated frames (iframes) could be inserted into sites to deliver malware or redirect users. Iframes split pages into parts that can be used to embed elements such as advertising or windows from a single website or redirect to other sites.
When an iframe's height and width is set to zero, it becomes invisible to users.
The site also claimed to verify malicious iframes against anti-virus lists every hour.
Copyright © SC Magazine, Australia
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED GOES EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @itnews.com.au to your white-listed senders.