Halloween provided extra scares as some sites were compromised with malware.
Websense Security Labs ThreatSeeker Network discovered that numerous Halloween-themed Web sites were compromised leading up to and during the festival.
The company identified one costume website which showed that the JavaScript had multiple-layers of obfuscation and the script contacts a malcious server in the .biz TLD. Websense claimed to have seen almost ten thousand sites infected with the same obfuscation technique.
A US retailer used the Halloween theme to promote its products, however its website was infected with a redirection that pointed to a gpack exploit kit. The ThreatSeeker network is currently tracking over thirteen-thousand sites infected with these patterns.
Finally Websense identified malware authors who have recently registered proxy websites that are using the Halloween theme to allow users to bypass traditional URL filtering solutions.
See original article on scmagazineuk.com
Websense identifies Halloween malware infections
By
SC Australia Staff
on
Nov 4, 2008 11:38AM
Halloween provided extra scares as some sites were compromised with malware.
Got a news tip for our journalists? Share it with us anonymously here.
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see