May 20 2008

Web sites across China and Taiwan are being hit by a mass SQL injection attack

Published by at 4:00 am under Uncategorized

From Computer World:

Web sites across China and Taiwan are being hit by a mass SQL injection attack that has implanted malware in thousands of Web sites, according to a security company in Taiwan.

First detected on May 13, the attack is coming from a server farm inside China, which has made no effort to hide its IP addresses, said Wayne Huang, CEO of Armorize Technologies Inc. in Taipei.

“The attack is ongoing,” Huang said. “Even if they can’t successfully insert malware, they’re killing lots of Web sites right now, because they’re just brute-forcing every attack surface with SQL injection, and hence causing lots of permanent changes to the victim Web sites.”

Read more…here

Comments Off

Comments are closed at this time.