1. Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Hacked Antivirus Site Delivers a Virus

Discussion in 'News' started by Polaris573, Feb 9, 2008.

  1. Polaris573

    Polaris573 Senior Moderator

    Joined:
    Feb 26, 2005
    Messages:
    4,279 (1.24/day)
    Thanks Received:
    709
    Location:
    Little Rock, USA
    The Web site for Indian antivirus vendor AvSoft Technologies has been hacked and is being used to install malicious software on visitors' computers, security researchers said last week. The download section of AvSoft's S-cop Web site hosts the malicious code, according to Roger Thompson, chief research officer with security vendor AVG. "They let one of their pages get hit by an iFrame injection," he said. "It shows that anyone can be a victim. ... It's hard to protect Web servers properly." The technique used on the site has been seen in thousands of similar hacks over the past few months. The attackers open an invisible iFrame Window within the victim's browser, which redirects the client to another server. That server, in turn, launches attack code that attempts to install malicious software on the victim's computer. The malicious software is a variant of the Virut virus family. The iFrame pages are commonly used by Web developers to insert content into their Web pages, but because it is possible to create an invisible iFrame window, the technology is often misused by hackers as a way to silently redirect victims to malicious Web sites.

    AvSoft, based in New Delhi, sells an antivirus product called SmartCOP and has sold a second antivirus product called Smartdog. The company, which is not well-known in the U.S., also specializes in recovering data lost due to virus attacks. The company could not be reached for comment Thursday afternoon.

    That data recovery service could come in handy for some, as Virut is known as a "parasitic infector" virus that is extremely difficult to remove. "It infects all of your programs on your local hard drives, and then it starts hitting your network drives as well the first time you run," Thompson said.

    Fortunately, the malware used to install Virut exploits only well-known bugs, meaning that users who are running antivirus software on fully patched systems will probably not be infected by the attack in its current state, security experts say.

    Nobody knows how the malware got onto the Web site in the first place. News of the hack was reported on the Full Disclosure security discussion list on Thursday.

    McAfee Security Research Manager Dave Marcus believes that the site was compromised by exploiting a Web programming error, most likely in the site's SQL or PHP code. Security experts say that criminals have written automated programs that scour the Web for these types of flaws and then automatically infect sites, making this an increasingly common problem.

    Source: PC World
  2. FreedomEclipse

    FreedomEclipse ~Technological Technocrat~

    Joined:
    Apr 20, 2007
    Messages:
    13,457 (5.07/day)
    Thanks Received:
    2,205
    thats very smart - the hackers are going after the source instead of the individuals & in doing that instead of infecting 1 person who passes the virus/trojan on to one person at the time they've literally 'napalmed' the public. not just 1 but thousands.

    1 - hackers | 0 - Av soft. |
  3. cool_recep

    cool_recep

    Joined:
    Oct 2, 2005
    Messages:
    344 (0.11/day)
    Thanks Received:
    63
    Location:
    Istanbul/Turkey
    I don't want to think how they explain that to their customers :D...



    ummmh....eghh.....our site......was hacked......:laugh:
  4. ChillyMyst

    ChillyMyst New Member

    Joined:
    Jan 20, 2008
    Messages:
    551 (0.23/day)
    Thanks Received:
    47
    haha, i will stick with nod32......hasnt failed me yet!!!
  5. Triprift

    Triprift

    Joined:
    Dec 10, 2007
    Messages:
    7,185 (2.97/day)
    Thanks Received:
    915
    Location:
    Adelaide Australia
    Never used em so dont really concern me ill just stick with pc cillan thankyou.
  6. moto666 Guest

    I think No matter what you choose!
    One time they will catch U!
    To many viruses out there...
    I'm using "Avast"
    It's free, it has a small CPU usage, everyday updated and looks sweet:D
    O.k.-o.k. I'm serious
    It's really fine!
    So I'm also happy whit it!
    What ever you chose, just use one:D:D:D
  7. cool_recep

    cool_recep

    Joined:
    Oct 2, 2005
    Messages:
    344 (0.11/day)
    Thanks Received:
    63
    Location:
    Istanbul/Turkey
    If u ask me the best is kaspersky internet security

    but ATM i use eset smart security
  8. moto666 Guest

    Hmm..
    Special I don't think there is a best "To rule them all"
    But Kaspersky is good!
    :)
  9. ex_reven New Member

    Joined:
    Sep 4, 2006
    Messages:
    5,225 (1.81/day)
    Thanks Received:
    171
    I think youve made a mistake there.
    It should be:

    Assholes - 1, Everyone else - 0
  10. Triprift

    Triprift

    Joined:
    Dec 10, 2007
    Messages:
    7,185 (2.97/day)
    Thanks Received:
    915
    Location:
    Adelaide Australia
    Exactly i hope if they find out who did it they major jail time.
  11. WarEagleAU

    WarEagleAU Bird of Prey

    Joined:
    Jul 9, 2006
    Messages:
    10,796 (3.67/day)
    Thanks Received:
    545
    Location:
    Gurley, AL
    I find this extremely hillarious and extremely brilliant at the same time.
  12. asb2106

    asb2106 New Member

    Joined:
    Jan 8, 2008
    Messages:
    1,940 (0.81/day)
    Thanks Received:
    149
    Location:
    kTOwN WI!!
    +1, it takes some tough work to do this.

    But in no way do I agree with it. I do think the people should get punished. I doubt they would get jail time but a huge fine.

    I have no respect for hackers. They do incredible work but its all for terrible reasons. If they spent that time and focus on something positive, they could probably do work like none other.
  13. jpierce55

    Joined:
    Oct 7, 2006
    Messages:
    1,335 (0.47/day)
    Thanks Received:
    91
    LOL my brother in law called and asked for help on their computer Thursday because it was acting up... guess what virus scan was on it!
  14. Triprift

    Triprift

    Joined:
    Dec 10, 2007
    Messages:
    7,185 (2.97/day)
    Thanks Received:
    915
    Location:
    Adelaide Australia
    well im glad i havnt used avsoft recently.
    Last edited: Feb 10, 2008
  15. ChillyMyst

    ChillyMyst New Member

    Joined:
    Jan 20, 2008
    Messages:
    551 (0.23/day)
    Thanks Received:
    47
    eset/nod32 is rated higher then kaspersky in all tests i have seen, kasper is on, but it uses more system resorces(ram/cpu) then esets nod32 and smart security.

    i have nod32 version3, its nice but has some buggs still under 64bit windows at least(missing tray icon is annoing.)

    but its VERY young still, so im not to upset, i will likely go back to nod32 2.7 till the kinks in 3.x are worked out, eather way its still the best AV on the market!!!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guest)

Share This Page