Widespread Web Attack Infects Thousands of Legitimate Sites (by Carlo Orlando)

[wings]

Widespread Web Attack Infects Thousands of Legitimate Sites

by Carlo Orlando

Thousands of legitimate websites have fallen victim to a widespread web attack.

While the full extent of the attacks remain unknown, security analysts suspect that the hackers used what is called an "SQL injection attack" in an attempt to fool legitimate web sites into running malicious database commands. In short, the attack injects malicious HTML content into a web browser while users are viewing an otherwise legitimate site.

If the malware is successfully installed, it opens a gateway which allows hackers to remotely control a PC. (Source: networkworld.com)

[...]

Full article at: http://www.infopackets.com/news/security/2010/20100611_widespread_web_attack_infects_thousands_of_legitimate_sites.htm