AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?storyid=1948
Last Updated: 2006-12-16 20:10:54
"…Report that indicates drive-by-downloads injected in Asus pages:
http://www.heise-security.co.uk/news/82643 *
This is definitely not the first such cases. Websites that are not secure are favourite sources for attackers to use them as a platform to launch attack…"
(De-obfuscated version of the VBScript shown at the ISC URL above.)
* "…Fewer than half the virus scanners on Virustotal fingered the culprit… Asus now appears to be cleaning up its sites. Some have been disinfected already, others remain dangerous. How long the sites have been infected, how many customers are affected and how the malware was able to establish itself on the servers is not yet known. A posting on a Belgian forum from 12th December suggests, however, that the infection has been present for a few days…"
- http://isc.sans.org/diary.php?storyid=1948
Last Updated: 2006-12-16 20:10:54
"…Report that indicates drive-by-downloads injected in Asus pages:
http://www.heise-security.co.uk/news/82643 *
This is definitely not the first such cases. Websites that are not secure are favourite sources for attackers to use them as a platform to launch attack…"
(De-obfuscated version of the VBScript shown at the ISC URL above.)
* "…Fewer than half the virus scanners on Virustotal fingered the culprit… Asus now appears to be cleaning up its sites. Some have been disinfected already, others remain dangerous. How long the sites have been infected, how many customers are affected and how the malware was able to establish itself on the servers is not yet known. A posting on a Belgian forum from 12th December suggests, however, that the infection has been present for a few days…"