LandzDown Forum

Security => Security Alerts & Briefings => Topic started by: Frands on April 21, 2008, 06:57:33 PM

Title: Websites hacked worlwide by hacker group Redrolix
Post by: Frands on April 21, 2008, 06:57:33 PM
Hi  :)

Info:

A hacker group called Redrolix is at moment busy hacking websites worldwide. At moment are over 12.000 websites worldwide hacked by the hacker group Redrolix. :Win73:

Example:
http://www.edenhosting.net/knowledgebase/help.asp (http://www.edenhosting.net/knowledgebase/help.asp)
Title: Re: Websites hacked worlwide by hacker group Redrolix
Post by: Frands on April 25, 2008, 01:16:37 PM
Update:

F-Secure and SANS Internet Stormcenter has reported on thursday, april 24, 2008 that there are another round  of mass SQL-injections going on. Over at F-secure they have made a google search which results in over 510,000 modified pages. Over at SANS Internet Storm Center they have found 226.000 sites.

Further reading:

http://www.f-secure.com/weblog/archives/00001427.html

http://isc.sans.org/diary.html?storyid=4331

Title: Re: Websites hacked worlwide by hacker group Redrolix
Post by: Frands on May 12, 2008, 07:48:00 PM
Hmm, I'm a kinda tired of this one :chair: :

Update 2
QuoteThe Internet Storm Center, which tracks online threats, warned Wednesday that a worm is infecting vulnerable Web sites with a database attack. Though relatively small by Web attack standards with about 4,000 reported infected sites, the assault adds invisible code to a site that can force visitors to download malware onto their PC. Bad PR, to say the least.
IMPORTANT: DO NOT visit the domain named in the following test, or any sites that show up on a Web search as having this domain listed in their pages' code (including cached pages). Doing so could infect your PC with malware.

To see if your site has been hit, run the following Google search: "site:your company domain (ex. pcworld.com) winzipices.cn." -- or search for that domain within your Web site's HTML code. If you find anything, let your IT know immediately.

http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9083858&intsrc=hm_list

http://isc.sans.org/diary.html?storyid=4393

Interesting reading:
http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20080507