Security firm tracks mass SQL injection attack

Dan KaplanMarch 31, 2011

At least 380,000 web pages have been infected via SQL injection to serve rogue anti-virus programs, known as scareware, security firm Websense reported Thursday. The sites were injected with code that directs victims to a website called Liza Moon, which automatically redirects users to a notorious site serving fake anti-virus. Both domains currently are down, according to Websense. This latest round appears to be targeting iTunes URLs that are used to update podcasts. This is one of the largest mass SQL injection attacks that Websense has detected since that style of attack became popular in 2008 and 2009.

Dan Kaplan

Vulnerability Management

‘MadMxShell’ leverages Google Ads to deploy malware via Windows backdoor

Steve ZurierApril 18, 2024

Security pros say using Windows backdoor in a malvertising campaign could expose companies to other malware attacks.

Network Security

DDoS attacks spike in first quarter

SC StaffApril 17, 2024

Fifty percent more distributed denial-of-service attacks have been launched by threat actors during the first quarter of 2024 over the same period last year, with thwarted DDoS attacks increasing by 93% year-over-year, SiliconAngle reports.

Close up the triple-lens camera on the iPhone 13 Pro Max Seirra Blue and Graphite Color on white background.

Application security

Updated LightSpy spyware targeted at South Asia

SC StaffApril 17, 2024

Security Affairs reports that attacks with an updated iteration of the LightSpy iOS spyware using the "F_Warehouse" framework have been deployed against Southern Asian targets as part of a new cyberespionage campaign.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news