Websense identifies Halloween malware infections

Halloween provided extra scares as some sites were compromised with malware.

Websense Security Labs ThreatSeeker Network discovered that numerous Halloween-themed Web sites were compromised leading up to and during the festival.

The company identified one costume website which showed that the JavaScript had multiple-layers of obfuscation and the script contacts a malcious server in the .biz TLD. Websense claimed to have seen almost ten thousand sites infected with the same obfuscation technique.

A US retailer used the Halloween theme to promote its products, however its website was infected with a redirection that pointed to a gpack exploit kit. The ThreatSeeker network is currently tracking over thirteen-thousand sites infected with these patterns.

Finally Websense identified malware authors who have recently registered proxy websites that are using the Halloween theme to allow users to bypass traditional URL filtering solutions.

See original article on scmagazineuk.com

Copyright © SC Magazine, US edition

halloweeninfectionsmalwaresecuritywebsense