Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: "Malicious" Websites - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
"Malicious" Websites

Previously, we often warn people from visiting unknown/suspicious websites as they could contain malicious content. But nowadays, even visiting known websites, you could be affected. It was reported that the India Times website contains hundreds of malicious files that could infected those visit the website.

http://www.theregister.co.uk/2007/11/10/india_times_under_attack/

Legitimate websites containing malicious content is not something new as it has already happened a couple of times. Web administrators must be prudent to ensure their websites are properly secure. Hackers are now clever enough not to deface your websites to alert you but rather plant malicious content on them and wait for victims. Periodically running a vulnerability scan on your web systems is necessary to avoid known holes. Let us know if you have other good tips for the web admin.

 Koon Yaw

68 Posts
Nov 10th 2007
Thread locked Subscribe Nov 10th 2007
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!