Slashdot Mirror

← Back to Stories (view on slashdot.org)

Asus.com Compromised With Exploit Code

Posted by kdawson on from the be-careful-out-there dept.

Juha-Matti Laurio writes in with news that the Web site of ASUSTeK Computer (asus.com) has been compromised to spread exploit code. The original report from Kaspersky Lab claimed that the compromise lead to code exploiting the recently patched Microsoft Windows Animated Cursor (.ANI) 0-day vulnerability, but sans.org found no evidence of this. Apparently a malicious iframe was added to one of the machines in asus.com's DNS round-robin.

5 of 117 comments (clear)

  1. Further evidence that ... by Aminion · · Score: 5, Interesting

    ... you don't have to visit porn, warez or shady sites to get your computer infected with all sorts of nastiness; "trusted" sites will just do.

  2. Advice by MindStalker · · Score: 3, Interesting

    Ok, friday I reinstalled a Asus laptop. While applying updates I was downloading asus drivers. Should I be concerned that I visited their site without a fully patched system? I hate to do it all over again? Any suggestions in how I can tell if I was infected.

  3. Re:DNS needs improvment... by JWSmythe · · Score: 3, Interesting


        The one that always annoyed me was Promise. That is, when I was still using their hardware. :)

        http://promise.com/ goes to a blank index page.

        http://www.promise.com/ goes to their real content page.

    --
    Serious? Seriousness is well above my pay grade.
  4. Only website affected? by AndrewM1 · · Score: 2, Interesting

    I'm surprised that whomever managed to crack into ASUS's servers only inserted malevolent HTML. Imagine the utter destruction they could have caused if they had *enhanced* the firmware downloads with some sort of (probably boot-sector) virus, or simply modified them to destroy the motherboard... *Shudder*

    Why wouldn't they? Are the file images stored separately or otherwise better protected?

  5. Re:Windows is unfit for business uses. by toadlife · · Score: 2, Interesting

    So what exploit in IIS6 do you think let this hack happen?

    --
    I don't always use unix-like operating systems; but when I do, I prefer FreeBSD.