Cybercrime shop manages hacked web sites

A Russian security site is hawking services to help hackers managed legions of compromised web sites.

The web site iframeservices.net, first identified by security blogger Brian Krebs, was a paid service that would help manage infected web sites, alerting customers when their URLs were blacklisted by anti-virus, and seeking deeper within the sites for additional or root vulnerabilities. 

It would also clean out erroneous FTP web site credentials and upload the client's malware to victim sites. 

The web site management console

The web site boasted that the service worked on sites including WordPress, Joomla, vBulletin and “many others”.

Integrated frames (iframes) could be inserted into sites to deliver malware or redirect users. Iframes split pages into parts that can be used to embed elements such as advertising or windows from a single website or redirect to other sites.

When an iframe's height and width is set to zero, it becomes invisible to users.

The site also claimed to verify malicious iframes against anti-virus lists every hour.

Copyright © SC Magazine, Australia