Hackers hacked the indian government website which is operated by the Institute of Remote Sensing.It has been compromised for malware purposes says Finjan Inc,one of the big company which provides web gateway products,and a provider of unified web security solutions for the enterprise market.
This Hacking is made on two fronts,first attack has happened when Indian government stepping up security on its hosting servers.secondly cybercriminals have added script into the site that adds an iFrame attack to the page,"said Yuval Ben- Itzhak, Finjan's chief technology officer.
"The page then re-routes to a LuckySploit-infected server in Texas that fires off multiple attacks across the Internet.Reports says that site hack and re-route infected several thousand users around internet.
Ben-Itzhak said the LuckySploit toolkit uses variety of methods that infect users and it uses a complex encryption system to hide what it is doing.bad news is that the infected pages can only detected by 4 out of 41 anti-virus engines on the Virustotal.com code checking portal.
Finjan's malicious code research team has notified the Indian CERT (Computer Emergency Response Team) operation about the problem saying that "More than anything, this infection teaches us that any site can be compromised and serve malicious code without the site owner knowledge".Thats why Web protection utilizing real-time content inspection will be needed for business which will prevent such attacks and protect thier valauable data from the hackers.
Ben-Itzhak suggests that "Individual users must consider installing a URL-checking browser plugin such as Finjan's free-to-use SecureBrowsing tool"
Comments