Attack Research, a company devoted to understanding computer-based attacks, has found new and unsettling security developments, including blog spam and SQL injections from Russia and China, reports CIO.com. Foreign attackers are focusing on widely used websites with blog spam and posted comments on blogs. If the user clicks on the links, they are taken to pages loaded with malware.
Val Smith of Attack Research told CIO.com that the attacks may be designed to install adware after a user visits an infected site. He said other hackers may be looking to expand their networks of compromised machines for nefarious reasons.
For more on these attacks:
- see this CIO.com article [1]
Related Articles:
New variant of PDF attack requires no user action [2]
Are industrial computer systems vulnerable to attack? [3]
China and U.S. tie as Internet attack source [4]
Critical vulnerability opens electrical grids to attack [5]
Links:
[1] http://www.cio.com/article/484614/Foreign_Web_Attacks_Change_Security_Paradigm
[2] http://www.fiercecio.com/techwatch/story/new-variant-pdf-attack-requires-no-user-action/2009-03-13-0
[3] http://www.fiercecio.com/story/are-industrial-computers-systems-vulnerable-attack/2008-09-10
[4] http://www.fiercecio.com/story/china-and-u.s.-tie-as-internet-attack-source/2008-06-02
[5] http://www.fiercecio.com/story/critical-vulnerability-opens-electrical-grids-attack/2008-09-26