JavaScript malware infecting various websites

By
Follow google news

Dozens of unrelated websites contain malicious scripts that attempt to infect users' machines with malware, security experts said today.

The reports come two days after the highly trafficked website for Dolphin Stadium, host of today's Super Bowl, was infected with a JavaScript-enabled keylogging trojan that took advantage of two previously patched Microsoft vulnerabilities.

In a blog post today, Marcus Sachs, director of the SANS Internet Storm Center, listed about 50 sites that contain the malicious pointers.

He urged system administrators to block network traffic to the sites until it can be confirmed they are free of malware. Users can be infected simply by visiting the websites.

Mikko Hypponen, chief research officer at F-Secure, said some of the hacked sites relate to the Super Bowl.

Sachs, meanwhile, reported that a number of attacks are targeting hospital or medical care sites.

Click here to email reporter Dan Kaplan.


Add iTnews as your trusted source

Got a news tip for our journalists? Share it with us anonymously here.
Tags:

Most Read Articles

Critical flaws strike PHP as disclosure embargo is broken

Critical flaws strike PHP as disclosure embargo is broken

Cloudflare warns fixing botched eMudhra certs goes beyond browsers

Cloudflare warns fixing botched eMudhra certs goes beyond browsers

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants

Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants

Log In

  |  Forgot your password?