U.S. Treasury websites infected with malicious script

Three US Department of Treasury websites have been compromised to spread malware, a security researcher said yesterday.

The sites belong to the US Bureau of Engraving and Printing, whose primary mission is to produce paper currency for the federal government.

Roger Thompson, chief research officer at AVG, said the attackers injected a malicious IFRAME into the sites, causing visitors to unknowingly be redirected to a hacker-owned site in the Ukraine. The attack site, grepad.com, has previously been flagged as suspicious, according to a StopBadware report.

A spokesperson for the Treasury Department did not immediately respond to a request for comment. It is unclear whether any visitors were infected.

Thompson said bep.gov, bep.treas.gov and moneyfactory.gov are affected.

See original article on scmagazineus.com