SQL attack to affect over 100,000 websites

By

The strength of SQL injections has been demonstrated with an attack on a large internet service provider.

An attack has been made upon Vaserv.com with the data for around 100,000 websites destroyed by attackers who targeted a zero-day vulnerability in the HyperVM virtualisation application.


 

According to The Register, Vaserv.com director Rus Foster claimed that data for about half of the websites hosted on Vaserv was destroyed all at once over the weekend shortly after administrators noticed something strange on the system.

 

He claimed that the attackers had the ability to execute sensitive Unix commands on the system, including ‘rm –rf' that forces a recursive delete of all files.

 

At the time of writing, there have been no reports of any hacker claiming responsibility for the attack, although Foster claimed that it was an SQL attack and that it was deliberate.

 

Amichai Shulman, CTO of Imperva, said: “If this is indeed SQL injection it is yet another demonstration of the power of this attack. A month or so ago the DNS Registrar for Puerto Rico was hit by an SQL Injection attack resulting in domains like google.pr, Microsoft.pr and others referencing attacker controlled servers delivering malware.

 

“SQL injections are getting meaner by the day. The bottom line: companies need to maintain a tight-fisted control over the traffic flowing in and out of the full application stack.”



See original article on scmagazineuk.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

CBA using facial recognition logins to verify disputed payments

CBA using facial recognition logins to verify disputed payments

Qantas obtains court order to prevent third-party access to stolen data

Qantas obtains court order to prevent third-party access to stolen data

Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage

Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage

Researchers demo AI-crippling GPUHammer attack

Researchers demo AI-crippling GPUHammer attack

Log In

  |  Forgot your password?