Microsoft investigating source of internet attack

By

Microsoft on Saturday said it was working with law enforcement to track down those responsible for an attack that compromised enterprise web sites running unpatched versions of IIS 5.0 (Internet Information Services).

The server that was the source of the attack, called Download.Ject, was tracked down in Russia and shut down Thursday, according to Microsoft.


But the software giant said it was not aware of "any widespread customer impact" from Dowload.Ject, which it said was not a worm or virus but a "targeted manual attack by individuals or entities towards a specific server."

The attack exploited a vulnerability in Internet Explorer in order to send malicious code to visitors of compromised web sites.

Microsoft advised customers to install the update it issued in April and said Internet Explorer users should use high security settings.

www.microsoft.com

 

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Allianz Life says majority of US customers' data stolen in hack

Allianz Life says majority of US customers' data stolen in hack

NT gov agency targeted in alleged $3.5m BEC scam

NT gov agency targeted in alleged $3.5m BEC scam

Microsoft says some SharePoint server hackers now use ransomware

Microsoft says some SharePoint server hackers now use ransomware

Log In

  |  Forgot your password?