Paris Hilton’s official web site serving malware
Moreover, just like we’ve seen in previous related attacks, Hilton’s site compromise is a part of bigger malware campaign affecting several thousand sites, and is not being exclusively targeted.
- Go through related incidents - Adobe’s Serious Magic site SQL Injected by Asprox botnet; 200,000 sites spreading web malware, China’s hosting the most; Sony PlayStation’s site SQL injected, redirecting to rogue security software; Redmond Magazine Successfully SQL Injected by Chinese Hacktivists; Over 1.5 million pages affected by the recent SQL injection attacks.
Let’s discuss the attackers’ logic applied here. December’s massive SQL injection attack affecting thousands of Chinese web sites used as infection vectors serving the IE XML parsing zero day, is an example of the “long tail of SQL injected sites” versus targeted attacks against high profile sites. Basically, their mentality relies on the fact that not only would thousands of sites acquire more traffic than a high profile one, but also, that their campaign may live longer if they diversify instead of centralizing it by using a single high profile site despite the anticipated traffic that would come from it.
For the time being the malicious iFrame has been removed, and the malware campaign is in a cover-up phrase — they wish.
Post a Comment