The ISC is warning of an injection attack using the domain nikjju.com. The WHOIS details of this domain are very familiar: Registrant Contact: JamesNorthone James Northone [email protected] +1.5168222749 fax: +1.5168222749 128 Lynn Court Plainview NY 11803 us The hotmailbox.com domain is a sign of evil, and these are likely […]
We posted a few days ago about a Mass SQL injection campaign that has been compromising thousands of sites. Our latest numbers show more than 200,000 pages got infected with the nikjju.com malware. However, since the last two days, the attackers switched domain names and are now using hgbyju.com to distribute their malware (also hosted […]
I haven’t seen much buzz about this injection attack yet, but several hundred thousand pages have been infected with an injection attack pointing to gbfhju.com/r.php. According to this Google search there are 236,000 hits for the search string “gbfhju.com/r.php”. The sites seem to be randomly distributed through the web, although I couldn’t spot any infected […]
Latest Comments