Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Digg this story   Add to del.icio.us  
.my Websites Compromised
F-Secure, 2009-10-22
Users aren't the only ones that have to stay vigilant when it comes to security. On the other side of the fence, keeping a website secure is a challenge for even the best webmasters.

We recently came across lots of websites under the ".my" domain that were compromised and unintentionally hosting malicious or unsafe links.

A very small sample of these sites:

mydomain_hack_search

Quite a few of the sites were hosting crack files:

mydomain_hack_cracks

mydomain_hack_download

Others had less savory things to offer:

mydomain_hack_smartresults

Some sites had a page that looked like a search engine:

mydomain_hack_fakesearch

Clicking on any of the links didn't do anything, though.

The compromised sites were on multiple servers and are a disparate collection of commercial, personal and educational institution websites.

As usual, relevant malicious links were rated and F-Secure users are protected by our Browsing Protection.


WebSecurity post by - Chu Kian

On 22/10/09 At 02:51 AM




The information, views, and opinions contained on this page are those of the author and do not necessarily reflect the views and opinions of SecurityFocus.






 

Privacy Statement
Copyright 2009, SecurityFocus