Malware, Network Security, Vulnerability Management hacked to distribute malware

Hackers on Monday compromised, the official website for the popular open-source MySQL database, to distribute malware to visitors, according to security researchers.

The hack caused those who visited the site on Monday morning to be redirected to a domain that attempted to install malware on their machines via the Black Hole exploit pack, Wayne Huang, CEO of web application firm Armorize, said in a blog post Monday. The site appeared to be cleaned by 3 p.m. EST, according to reports.

The Black Hole pack attempted to launch a number of exploits against users' browsers and plug-ins, such as Adobe Flash and Java. If successful, users' machines silently were hit with malware, which was detected early Monday by just over 10 percent of the most widely used anti-virus programs.

“The visitor doesn't need to click or agree to anything," Huang wrote while the attack was still active. "Simply visiting with a vulnerable browsing platform will result in an infection."

Oracle, which owns MySQL, did not immediately respond Monday when contacted by

This is not the first time has been compromised. In March, hackers infected the site via SQL injection and published a list of usernames and passwords online.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.