Mass SQL Injections Spike Again

Dermot7 · May 9, 2012

Security researchers have reported spikes in mass SQL injection attacks of late that take advantage of very common vulnerabilities in the way that Web applications interact with back-end databases. Particularly targeting ASP, ASP.Net, and MS-SQL sites, these mass SQL injection campaigns have been linked to black hat efforts to redirect victims to browser exploit kits like Blackhole or Phoenix.

"There's been a growing increase on the mass SQL injections side mainly because there is business to be had and money to be made in that area," says Gunter Ollmann, vice president of research for Damballa. "There are a growing number of professional hackers and crime groups that specialize in quick and rapid identification of websites that are vulnerable to SQL injection, and they monetize that by injecting malicious code normally as part of the pay-per-install or the iFrame injection-type business."
Click to expand...

http://www.darkreading.com/database...40000077/mass-sql-injections-spike-again.html

Log in or Sign up

Mass SQL Injections Spike Again

Dermot7 Registered Member

Log in or Sign up

Mass SQL Injections Spike Again

Dermot7 Registered Member

Useful Searches