Mass Infection of IIS/ASP Sites, (Wed, Jun 9th)

Clientele

Security Resources
- Center For Information Security Awareness
  InfraGard Awareness is a FREE information security awareness course that will teach you vital skills to protect yourself and your family from cybercrime and identity theft
- Comodo Free Security Solutions
  Internet Security Suite of cutting edge security including Antivirus, Firewall, malware prevention and more.
- Panda Security Tools
  Panda Security offers a range of free anti-virus tools to optimize the security of your PC. Download them free and start to benefit from their many features.
- Password Safe Password Management
  Password Safe allows you to safely and easily create a secured and encrypted user name/password list.
- ThreatFire Zero-Day Malware Protection
  By implementing sophisticated real-time behavioral analysis ThreatFire is able to stop never- before-seen “zero-day” threats solely by detecting their malicious activity.

Mass Infection of IIS/ASP Sites, (Wed, Jun 9th)

Posted by | News | Thursday 10 June 2010 1:05 am

Sucuri.net has released a report about a large number of sites that have been hacked and contain a malware script. A quick Google today indicates that

there are currently 111,000 sites still infected.It appears that this is only impacting websites hosted on Windows servers. The situation is being investigated.

For those who are hosting there websites on Windows IIS/ASP you may find more information here.
http://blog.sucuri.net/2010/06/mass-infection-of-iisasp-sites-robint-us.html
http://nsmjunkie.blogspot.com/2010/06/anatomy-of-latest-mass-iisasp-infection.html
Update:Paul at Sophos logs has released some additional information regarding this exploit and Infection. Thanks Paul.
http://www.sophos.com/blogs/sophoslabs/?p=9941
Deb Hale Long Lines, LLC

(c) SANS Internet Storm Center. http://isc.sans.org Creative Commons Attribution-Noncommercial 3.0 United States License.

View full post on SANS Internet Storm Center, InfoCON: green

Comments Off

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Some Content may originate from third party websites(i.e. Amazon, Yahoo Answers, Youtube)
Internet SecuritT Group LLC is not responsible or liable for the content of any third party affiliate
All third party content is property of the respective owners.

Featured Internet Security Services

Clientele

Security Resources

Mass Infection of IIS/ASP Sites, (Wed, Jun 9th)

No Comments