Breaches galore as Cryptome hacked to infect visitors with malware

[ronjor]

By Dan Goodin

A breach that caused Cryptome.org to infect visitors with virulent malware was one of at least six attacks reported to hit high-profile sites or services in the past few days. Others affected included Ticketmaster, websites for Mexico and the state of Alabama, Dutch ISP KPN, and the Microsoft store in India.

Cryptome, a repository of leaked documents and other information concerning free speech, privacy and cryptography, was attacked by hackers who left code on its servers that attempted to infect visitors using Windows PCs with a trojan spawned by the Blackhole Toolkit, the website reported on Sunday.

http://arstechnica.com/business/news...th-malware.ars

[Hungry Man]

More proof that "safe browsing" and "common sense" won't do jack for a user. Another (at least somewhat) safe website spewing malware.

[funkydude]

Originally Posted by Hungry Man

More proof that "safe browsing" and "common sense" won't do jack for a user. Another (at least somewhat) safe website spewing malware.

Not really. 99.99% of the time you've got absolutely nothing to worry about if you're fully patched, which falls under common sense, alongside declining any download a server might suddenly shovel to you without asking.

[Hungry Man]

99.99%? Sounds legit.

[G1111]

Originally Posted by funkydude

Not really. 99.99% of the time you've got absolutely nothing to worry about if you're fully patched, which falls under common sense, alongside declining any download a server might suddenly shovel to you without asking.

Always concerned about that .01% though. I visited an online photo site and if it wasn't for my security setup I would have been hosed.

[funkydude]

Originally Posted by Hungry Man

99.99%? Sounds legit.

Well, how often do you hear about 0-day brand new unpatched vulnerabilities being used? Now, how often do you hear about month old patched vulnerabilities being used?

[Hungry Man]

I definitely hear about 0days once in a while (A flash/java one pops up once in a while and they'll even get exploited), not all that rare at all. Patched vulns get used more often, but a lot of the times it's recently patched, ie: just a few days old (this has happened a lot with java, exploits that are out within the week.)