Tag Archives: hacking

No such thing as a guaranteed safe site

When I talk to friends about web-based badware, one of the most frequent things I hear is a version of “Oh, I don’t have to worry about that – I don’t go to any sketchy sites.” The security world has … Continue reading

Tagged , , | Comments Off

Google’s new resource for owners of compromised sites

Google has rolled out a new resource for owners of compromised websites that it flags as potentially dangerous in its search results. “Google Diagnostics”:http://googleonlinesecurity.blogspot.com/2008/05/safe-browsing-diagnostic-to-rescue.html shows information about malware and malware-distributing behaviors that Google has observed on the site within the … Continue reading

Tagged , , , , | Comments Off

StopBadware discussion group sees flurry of hacked WordPress blogs

We like to feature occasional guest posts from members of the StopBadware community. Below, guest poster and StopBadware discussion group volunteer Steven Whitney sheds some light on a recent flurry of attacks on WordPress sites: The StopBadware discussion group began … Continue reading

Tagged , , , | Comments Off

Half of malware-distributing websites have been hacked

Security vendor Websense has released a report showing that half of the malware-distributing websites it examined in the second part of 2007 were otherwise legitimate sites that had been hacked. The report points to unpatched software vulnerabilities and problems on … Continue reading

Tagged , | Comments Off

Hackers gaming search results with malware

In the last few days, there has apparently been a surge of badware-distributing web sites that trick search engines into thinking they’re legitimate. Researchers at Sunbelt Software first reported the gaming of Google results a few days ago, with articles … Continue reading

Tagged , , , | Comments Off

Background images emerging tool of MySpace hackers

MySpace users, look out for a new brand of website hacking technique that’s emerged over the past week. The hack inserts code that loads a background image linking back to a badware site, and has so far had several prominent … Continue reading

Tagged , , , | Comments Off

Russian Business Network badware shop goes underground

The internet security community is buzzing with the news that the Russian Business Network (RBN), a notorious group of professional badware distributors and online criminals, has pulled down its websites and abandoned its IP addresses, effectively vanishing from the internet. … Continue reading

Tagged , , , , | Comments Off

Hidden dangers in third party content

If you’re a regular reader of this blog, by now you’re probably familiar with the idea of hackers who inject code – often invisible iframes or javascript – onto otherwise innocent but poorly secured sites. Another way that sites can … Continue reading

Tagged , , , , | Comments Off

“No tears, no glory”: Rebecca the webmaster traces a hacking attack to her site

The webmaster of a site that was hacked to distribute badware has teamed up with a volunteer on the StopBadware discussion forum to trace the hack through her site, and share her story with others. Rebecca the webmaster and Jart … Continue reading

Tagged , , | Comments Off

Malicious Hacking: One Site’s Story

If you’ve been following StopBadware’s work over the past few months, you know that we have witnessed a sharp increase in the number of websites distributing badware. More and more of these sites are turning out not to be malicious … Continue reading

Tagged , | Comments Off