Hacked BBC streaming websites serve up malware

[Malcontent]

http://www.theregister.co.uk/2011/02...veby_download/

Streaming sites operated by the BBC were hacked on Tuesday so they silently served visitors with malware, researchers from security firm Websense said.

An iframe tag on the BBC's 6 Music and 1Xtra websites injected an exploit that was housed on a website with an address ending in cc, a top level domain for the Cocos Islands. The malicious binary was generated by the Phoenix exploit kit, which dates back to 2007 and streamlines malware infections by collecting detailed statistics.

“If an unprotected user browsed to the site they would be faced with drive-by downloads, meaning that simply browsing to the page is enough to get infected with a malicious executable,” Websense researchers wrote in a blog post.

[Dermot7]

Not the first time they've served up "Mahlerware".......they need to sort it out!

http://www.wilderssecurity.com/showthread.php?t=281632

[Rmus]

Thanks, Malcontent.

The malicious binary was generated by the Phoenix exploit kit,...

“If an unprotected user browsed to the site they would be faced with drive-by downloads, meaning that simply browsing to the page is enough to get infected with a malicious executable,”...

Here is the latest Phoenix Kit as of February 4:

Now Exploiting: Phoenix Exploit Kit Version 2.5
http://blog.trendmicro.com/now-explo...t-version-2-5/

It's amazing how these exploits are still snagging victims - two of the most successful target IE6 and have been patched, one in 2006:

IE MDAC CVE-2006-0003
IE SnapShot Viewer ActiveX Vulnerability CVE-2008-2463

Prevention against the binary executable is secured by SRP or anything similar that blocks unauthorized executables. Unfortunately, the common victims are not aware of such preventative measures.

Nor are they likely to even know about such potential for contaminating web sites, which has been written about for at least 4 years...

Regulars at Wilders are in a unique position to spread the word and help (those who will listen) with patches/security against such exploits.

----
rich