It’s Christmas time! Time for charity! In Finland, the most popular Christmas charity is run by the local salvation army. Their campaign is called Joulupata. And as you might expect, they have a website at www.joulupata.fi. Earlier today, if you googled for ‘joulupata’, the first search result looked unusual: Looks dangerous. So let’s visit the […]
Since last week we started to see a large increase in the number of sites compromised with a .htaccess redirection to http://sweepstakesandcontestsinfo.com/nl-in.php?nnn=555. This domain has been used to distribute malware for a while (generally through javascript injections), but only in the last few days that we started to see it being done via .htaccess. This […]
Update: mysql.com appears to be clean now (they replaced the script that contained the malicious code). Popular website mysql.com has been hacked and is serving malware. Here is the sequence of events viewed from Fiddler (highlighted are the malicious parts): The hacker(s) modified a legitimate javascript and injected some malicious code into it. Even though […]
Latest Comments