Stolen FTP Credentials Key to Gumblar Attack
Analysts of the recent Gumblar attack that compromised thousands of legitimate websites stated that the unauthorized modifications in the websites were possibly executed not only through SQL injection . The compromise was also reportedly done through accessing web server files through stolen FTP credentials gathered by one of the final malware payloads of the same attack. The infection chain initiated by the malicious scripts HTML_JSREDIR.AE and HTML_REDIR.AC end with the download of TSPY_KATES.G into the affected system.
Go here to read the rest:
Stolen FTP Credentials Key to Gumblar Attack
Tags: download, hacked-sites, internet, iphone, malicious-sites, online, phishing, rootkit-buster, security, vulnerabilities, washington
This entry was posted on Wednesday, June 10th, 2009 at 3:38 am and is filed under security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.