When a visitor reaches one of the hacked sites, the malicious JavaScript loads a
file from the malware-hosting server, then redirects the browser to a different
page, also hosted on the Chinese server.
"Once loaded, the file attempts
eight different exploits," noted the Websense warning, including one that hits a
vulnerability in Internet Explorer's handling of Vector Markup Language (VML) that
was patched in January 2007.
Hackers jack thousands of sites, including UN domains
No comments:
Post a Comment