According to InfoWorld, security experts have found an increasing number of
web sites hosting malicious
JavaScript code that was discovered last week on Super Bowl related sites.
Sites covering topics ranging from health care to government have been hacked to
host the JavaScript, SANS Internet Storm Center Director Marcus H. Sachs wrote
on the SANS blog, listing some of the hacked sites.
The attack targets two known vulnerabilities in Microsoft's Windows operating
systems, for which patches were issued in April and January. Computers with
unpatched software are vulnerable to the attack. If one of the hacked sites is
visited, the JavaScript code directs the browser to a second Web server, based
in China, and tries to install a Trojan Horse downloader and password-stealing
program on the victim's computer. Initially, the exploit appeared isolated to
Web sites related to U.S. football, as hackers tried to capitalize on the surge
of traffic to sites concerning the Super Bowl sporting event, which was played
on Sunday. The site of the Miami Dolphins team, and another site for its
stadium, were hacked, although they were eventually cleaned up.
