The Inquirer-Home

UK government and UN computers join botnet

Hackers engineer mega JavaScript attacks
Thu Apr 24 2008, 08:45

GOVERNMENT networks in Blighty, as well as UN computers, have been hacked and ensnared in a botnet, according to Insecurity experts.

Websense claims the attacks happened in March using some sort of SQL injection. What was alarming that among the victims were some important UK government and UN sites that would give the botnet considerable credibility. Another high profile site that was taken over for a bit was MSNBC.com.

Websense said that it is impossible to know how many sites have been compromised. A spokesman guessed that the figure was around 100,000 URLs.

A victim reaching a hacked site will be redirected a different page, hosted on a Chinese server. The IP address keeps changing within the JavaScript making it hard to locate.

Security researcher, Giorgio Maone, told ComputerWorld that the UK based sites appeared to have been cleansed of the malware while the UN sites still had it.

Maone said that the UN site had a pretty pants firewall that made it a doddle to compromise. µ

L'Inq
Computerworld

 

Share this:

blog comments powered by Disqus
Advertisement
Subscribe to INQ newsletters

Sign up for INQbot – a weekly roundup of the best from the INQ

Advertisement
INQ Poll

Heartbleed bug discovered in OpenSSL

Have you reacted to Heartbleed?