Asus.com Compromised With Exploit Code
Juha-Matti Laurio writes in with news that the Web site of ASUSTeK Computer (asus.com) has been compromised to spread exploit code. The original report from Kaspersky Lab claimed that the compromise lead to code exploiting the recently patched Microsoft Windows Animated Cursor (.ANI) 0-day vulnerability, but sans.org found no evidence of this. Apparently a malicious iframe was added to one of the machines in asus.com's DNS round-robin.
Perhaps now they will finally fix the missing www. entry in their DNS server. I have always hated that they didn't have that patched.
"The price good men pay for indifference to public affairs is to be ruled by evil men." ~Plato (427-347 BC)