Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: InfoSec Handlers Diary Blog - Websense warns about Lizamoon InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Websense warns about Lizamoon

Published: 2011-03-31
Last Updated: 2011-03-31 17:54:17 UTC
by Joel Esler (Version: 1)
5 comment(s)

This article over on the Websense blog is warning about a new mass sql-injection attack that they have dubbed "Lizamoon".  (As that's the domain that the sql injection attack is referring people to.)

By searching for the string in Google, an estimated 226,000 sites have been attacked and defaced with this method.  (We know that the numbers from Google aren't accurate, we are putting them there to display the size of the attack -- BIG.)

While I don't necessarily agree with the title of the article (implying that iTunes is infected), this attack and the Mysql attack from earlier this week are just more examples of how there isn't enough emphasis put on preventing sql injection.

 

-- Joel Esler | http://blog.joelesler.net | http://twitter.com/joelesler

Keywords:
5 comment(s)
Diary Archives