sql injected

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Thousands of legitimate sites SQL injected to serve IE exploit

Thousands of legitimate sites SQL injected to serve IE exploitThis is why Firefox + NoScript isn't a magic fixBefore any Firefox zealots start going nuts, Firefox + NoScript is my browser configuration of choice.That being said, people do have to be careful when they use the "Allow " option of...

Tags: Web browsers, SECURITY, Viruses and worms, NoScript, whitelist, Mozilla Firefox, SQL, Microsoft Internet Explorer, attack

Discussion threads 2008-12-17

Adobe's Serious Magic site SQL Injected by Asprox botnet

Adobe's Serious Magic site SQL Injected by Asprox botnet"But I only go to safe sites"This is why I want to slap everyone who says that is protection against infection.RE: Adobe's Serious Magic site SQL Injected by Asprox botnetI appreciate when articles like this give the user an advanced warning. ...

Tags: INTERNET, Programming languages, Web browsers, SQL Injected, Asprox, Serious Magic, SQL, Adobe Systems Inc.

Discussion threads 2008-10-17

Sony PlayStation's site SQL injected, redirecting to rogue security software

Sony PlayStation's site SQL injected, redirecting to rogue security softwarenot suprisedI ran across this also during our research, can only imagine how many browsers visited Sony's site and became infected...If Sony or anyone else running old ASP websites read this, please inspect your code with the tool MS released: http://support.microsoft.com/kb/954476Thanks...

Tags: Game players, Programming languages, Sony Corp., SQL Injected, Sony Playstation, SQL, security

Discussion threads 2008-07-02

Additional Resources

The ultimate guide to scareware protection

Throughout the last two years, scareware fake security software, quickly emerged as the single most profitable monetization strategy for cybercriminals to take advantage of. Due to the aggressive advertising practices applied by the cybercrime gangs, thousands of users fall victim to the scam on a daily...

Tags: Search Engine Optimization, Web, Search Engine, Antivirus, Malware, Social Engineering, Security Software, Search, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Security, Marketing Research, Marketing, Dancho Danchev

Blog posts 2009-09-13

Password-reset flaw haunts WordPress admins

Open source and PHP at its worstI cannot fathom the design decisions that went into PHP. Maybe that's because there weren't any. That "language" I use that term in the broadest sense here is accident upon accident, quirk upon quirk, patch upon patch. PHP is a complete mess without a...

Tags: Scripting languages, PHP, Wordpress

Discussion threads 2009-08-11

20,000 sites hit with drive-by attack code

Hackers have broken into more than 20,000 legitimate Web sites to plant malicious code to be used in drive-by malware attacks. According to a warning from Websense Security Labs, the sites have been discovered to be injected with malicious JavaScript, obfuscated code that leads to an active...

Tags: Malware, Attack, Exploit Site, Spyware, Adware & Malware, Cyberthreats, Security, Viruses And Worms, Ryan Naraine

Blog posts 2009-06-01

The Web's most dangerous keywords to search for

Which is the most dangerous keyword to search for using public search engines these days? It's "screensavers" with a maximum risk of 59.1 percent, according to McAfee's recently released report "The Web's Most Dangerous Search Terms". Upon searching for 2,658 unique popular keywords and phrases across 413,368...

Tags: Search Engine Optimization, Web, Cybercriminal, Keyword, Search, Marketing Research, Marketing, Dancho Danchev

Blog posts 2009-05-27

Twitter worm author gets a job at exqSoft Solutions

UPDATE: Mikeyy Mooney of Stalk Daily gets Hacked. Here's more info. Now that was so fast that even Owen Thor Walker AKILL and Michael Calce Mafiaboy should envy the short cybercrime-to-job offer cycle here. 17 years old Mikeyy Mooney, the author/spreader of StalkDaily/Mickeyy XSS worm that exploited...

Tags: Job, Web, XSS, Web Application, Worm, Twitter, Cloud Computing, Cyberthreats, Channel Management, Security, Viruses And Worms, Marketing, Dancho Danchev

Blog posts 2009-04-17

Scareware pops-up at FoxNews

There have been numerous reports from affected users that a scareware variant of PersonalAntivirus and ExtraAntivirus has been poping-up at FoxNews.com during the last couple of days, through a malvertising campaign. This most recent case of malvertising (MSN Norway serving Flash exploits through malvertising; Fake Antivirus XP...

Tags: Web, Advertisement, Campaign, Network, Web Site, Web Site Development, Channel Management, Security, Viruses And Worms, Internet, Marketing, Dancho Danchev

Blog posts 2009-04-15

Paul McCartney's official site serving malware

All you (don't) need is malware on Paul McCartney's official web site. According to Mary Landesman at ScanSafe, the official web site of Paul McCartney (paulmccartney.com) has been compromised, and is serving live exploits to its visitors. Landesman points out that the compromise might have occurred through...

Tags: Web, Malware, SQL, Web Site, FTP, Paul McCartney, Spyware, Adware & Malware, Cyberthreats, Web Site Development, Channel Management, Viruses And Worms, Security, Databases, Internet, Marketing, Enterprise Software, Software, Data Management, Dancho Danchev

Blog posts 2009-04-08

Scareware meets ransomware: "Buy our fake product and we'll decrypt the files"

A newly pushed scareware called File Fix Professional 2009 (FileFix Pro 2009), has the potential to influence the way in which spreaders of rogue security software optimize their revenue in the future - by encrypting critical business files and requiring a $50 purchase of the fake...

Tags: Network, Security Software, Mergers & Acquisitions, Security, Viruses And Worms, Investment, Finance, Dancho Danchev

Blog posts 2009-03-26

Research: 76% of phishing sites hosted on compromised servers

In a newly released paper entitled "Evil Searching: Compromise and Recompromise of Internet Hosts for Phishing" Tyler Moore and Richard Clayton provide empirical evidence according to which 75.8% of the phishing sites that they've analyzed (2486 sites) were hosted on compromised web servers to which the phishers obtained access through...

Tags: Server, Phishing Web Site, Phishing, Cyberthreats, Spam, Viruses And Worms, Security, Spam And Phishing, Dancho Danchev

Blog posts 2009-02-26

Rogue security software spoofs ZDNet Reviews

Impersonation is a form of flattery by itself, however, not when it comes to the very latest round of rogue security software this time impersonating ZDNet, CNET's and PC Magazine's reviews section, making it look like legitimate and highly respected technology sites have actually reviewed and recommend the rogue security...

Tags: Software, Security Software, Impersonation, O1, Security, Dancho Danchev

Blog posts 2009-02-20

Paris Hilton's official web site serving malware

The official web site of Paris Hilton (parishilton.com) has been embedded with a malicious iFrame, automatically exposing visitors to client-side vulnerabilities and banker malware, according to researchers from ScanSafe. Upon closer analysis, it appears that the site has been infected on the 8th of January, Thursday, becoming the very latest...

Tags: Channel Management, Cyberthreats, Dancho Danchev, Data Management, Databases, Enterprise Software, Hilton Hotels Corp., Internet, Malware, Marketing, Programming Languages, Security, Site, Software, Software Development, Software/Web Development, Spyware, Adware & Malware, SQL, Viruses And Worms, Web, Web Site, Web Site Development

Blog posts 2009-01-14

News to know: IE exploit; Windows Live; Crowdsourcing; Apple

Here are today’s notable headlines. You can get News To Know via email alert and RSS daily: Ed Bott: Windows Live drops the ball on support Mary Jo Foley: Will the Microsoft Live Search turmoil ever end? Gizmodo: The Definitive Coast-to-Coast...

Tags: Crowdsourcing, Microsoft Windows Live, Apple Inc., Microsoft Internet Explorer, Microsoft Corp., Macworld Expo, Adrian Kingsley-Hughes, Microsoft Windows, Web Browsers, Operating Systems, Software, Internet, Larry Dignan

Blog posts 2008-12-18

Thousands of legitimate sites SQL injected to serve IE exploit

Once again confirming the trend of having more legitimate sites serving exploits and malware than purely malicious ones, Chinese hackers have been keeping themselves busy during the last couple of days, launching massive SQL injection attacks affecting over 100,000 web sites. The SQL injection attacks serving the...

Tags: Web, Malware, SQL, Microsoft Internet Explorer, Exploit, Spyware, Adware & Malware, Cyberthreats, Security, Dancho Danchev

Blog posts 2008-12-17

Four XSS flaws hit Facebook

Project XSSed, the clearing house for cross site scripting flaws has just released details on four flaws affecting Facebook's developers page, iPhone login page and the new users registration page, potentially assisting malicious attackers into adding more legitimacy to their campaigns. With yet another critical XSS flaw hitting Facebook in...

Tags: Social Networking, Facebook, Flaw, XSS, Malware, Social Engineering, Security, Dancho Danchev

Blog posts 2008-12-15

Microsoft's Live Search (finally) adds malware warnings

Microsoft's Live Search team has officially announced the integration of warnings for potentially malware infected sites within Live Search, following last week's introduction of a malware warning service aimed at webmasters. According to a post by Christian Seifert, Software Design Engineer at Live Search Anti-Spam & Anti-Malware...

Tags: Microsoft Live Search, Malware, Microsoft Corp., Microsoft Live Search Team, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Security, Dancho Danchev

Blog posts 2008-12-03

Microsoft's Live launches malware detection service for webmasters

Playing catch-up with Google's Safe Browsing diagnostic, Google's warnings for potentially hackable sites, and Yahoo's SearchScan introduced through their partnership with McAfee, Microsoft's Live Search has updated their Webmaster tools to offer detection for embedded malware. Moreover, as a late entrant they simply had to differentiate, and they did it...

Tags: Webmaster, Malware, Microsoft Corp., Site, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Security, Dancho Danchev

Blog posts 2008-11-26

News to know: Ballmer on Windows 7; T-Mobile G1; Google's 3Q

Here are today’s notable headlines. You can get News To Know via email alert and RSS daily: Ballmer: It's ok to wait until Windows 7; Yahoo still 'makes sense'; Google Apps 'primitive' Microsoft wants you to move: To IE 8, Vista... Ballmer: 'Windows...

Tags: Google Inc., T-Mobile G1, Microsoft Windows 7, Steve Ballmer, T-Mobile, Service-Oriented Architecture (SOA), Microsoft Windows, Notebooks, Outsourcing, Open Source, Web Services, Enterprise Software, Software, Operating Systems, Hardware, Notebooks & Tablets, It Operations, Business Operations, Outsourcing & Subcontracting, David Grober

Blog posts 2008-10-17