Malware purveyors are exploiting web vulnerabilities in appleinsider.com,
lawyer.com, news.com.au and a dozen other sites to foist rogue anti-virus on
unsuspecting netizens.

The ongoing attacks are notable because they use exploits based on XSS, or
cross-site scripting, to hide malware links inside the URLs of trusted sites.
That's something application security expert Mike Geide doesn't see often. As a
result, people who expect to visit sites they know and trust are connected to a
page that tries to trick them into thinking their computer is infected.

"What's interesting ... is the fact that it's embedding iframes to redirect
people," Geide, who is a senior security researcher at Zscaler, told The
Register. "Typically, cross-site scripting is just that - it embeds script tags
so it will embed javascript to run."

Check Also

Игры в компьютер. Обзор игр, которые не только развлекут, но и обучат важным навыкам

Если ты читаешь эти строки — тебя, скорее всего, уже попросили самоизолироваться и соблюда…

Оставить мнение