Experts Study Developing Internet Attack

[ronjor]

CHICAGO (AP) - Government and industry experts warned late Thursday of a mysterious, large-scale Internet attack against thousands of popular Web sites. The virus-like infection tries to implant hacker software onto the computers of all Web site visitors.

Link (http://apnews.myway.com//article/20040625/D83DNQCG0.html)

[nick s]

Looks like what the Internet Storm Center is reporting under "RFI - Russian IIS Hacks?":

http://isc.incidents.org/diary.php?date=2004-06-24&isc=fe0caf277ab4310da28893c02f6637f7

Nick

[Pigman]

Damn, this looks bad. I hope that the next NOD32 update covers this crap... it better come awful soon...

BTW, does using Mozilla, Opera, or other "alternative" browsers provide any degree of protection?

[nick s]

Ran the the url in the script through Opera and got this:

Illegal address
url:ms-its:C:\WINDOWS\Help\iexplore.chm::/iegetsrt.htm

I'll wait a while and try it with IE.

Nick

[ronjor]

Cert (http://www.us-cert.gov/current/current_activity.html#iis5) Info


Javascript is used here. Easy enough to disable but destroys some of the perks.

[Snook]

My defense arsenal is loaded and ready...

[meneer]

-{ Quote: "My defense arsenal is loaded and ready..." }-
Mine isn't, but then again, I'm not running an IIS webserver ;D 8)

[meneer]

Servers that are patched with ms04-011 may not be vulnerable:
http://www.microsoft.com/security/incident/download_ject.mspx

[Pigman]

Hmm... Script Defender intercepts Javascript, doesn't it?

[justhelping]

-{ Quote: "Hmm... Script Defender intercepts Javascript, doesn't it?" }-

Not in this case.