Microsoft investigating source of internet attack

By

Microsoft on Saturday said it was working with law enforcement to track down those responsible for an attack that compromised enterprise web sites running unpatched versions of IIS 5.0 (Internet Information Services).

The server that was the source of the attack, called Download.Ject, was tracked down in Russia and shut down Thursday, according to Microsoft.


But the software giant said it was not aware of "any widespread customer impact" from Dowload.Ject, which it said was not a worm or virus but a "targeted manual attack by individuals or entities towards a specific server."

The attack exploited a vulnerability in Internet Explorer in order to send malicious code to visitors of compromised web sites.

Microsoft advised customers to install the update it issued in April and said Internet Explorer users should use high security settings.

www.microsoft.com

 

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

Service NSW centralises security, networking in mammoth CloudOps overhaul

Service NSW centralises security, networking in mammoth CloudOps overhaul

VicRoads to phase out passwords in favour of passkeys

VicRoads to phase out passwords in favour of passkeys

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

Log In

  |  Forgot your password?