Tuesday, April 8, 2008

Finnish Tietokone.fi portal under iFrame attack

Web portal of Finnish computer magazine Tietokone was closed down for ten hours last Friday (the 4th of April) afternoon when it was found out that site was spreading malicious script. Used attacking method was so called iFrame injection attack which was possible because server's security updates weren't up-to-date. Only Internet Explorer (IE) browser users were affected since malware utilized ActiveX technique supported only by IE.

The attack is part of large scale attack which security consultant Dancho Danchev writes about in his blog. Currently nmidahena.com server spreads its script on over 3000 web sites so Tietokone.fi wasn't any special target. During recent weeks similar attack has been used against large sites like Usatoday, News.com and Miami Herald among many others.

No comments: