Thousands of WordPress blogs hijacked to deploy malicious code

ronjor · Nov 3, 2011

Anti-virus firm Avast reportsPDF that criminals are exploiting a critical hole in the TimThumb WordPress add-on to deploy malicious code on a large scale. Avast says that it blocked more than 2,500 infected sites in September and anticipates a similar number in October. The attackers install the professional BlackHole exploit framework on the affected servers. The framework then tries to infect visitors to the WordPress blog with malicious code by trying out various vulnerabilities in the visitor's browser and installed plug-ins.
Click to expand...

http://www.h-online.com/security/ne...ijacked-to-deploy-malicious-code-1370897.html

Log in or Sign up

Thousands of WordPress blogs hijacked to deploy malicious code

ronjor Global Moderator

WordPress Users Warned of Malware Masquerading as ionCube Files

Domain Theft Strands Thousands of Web Sites

UK ICO, USCourts.gov... Thousands of websites hijacked by hidden crypto-mining code

Keylogger Found on 5,500 WordPress Sites

Using legitimate tools to hide malicious code

Log in or Sign up

Thousands of WordPress blogs hijacked to deploy malicious code

ronjor Global Moderator

WordPress Users Warned of Malware Masquerading as ionCube Files

Domain Theft Strands Thousands of Web Sites

UK ICO, USCourts.gov... Thousands of websites hijacked by hidden crypto-mining code

Keylogger Found on 5,500 WordPress Sites

Using legitimate tools to hide malicious code

Useful Searches