Malware Pulls an "Italian Job"

A number of readers sent us word about a malware attack that has been underway since Saturday that began with the compromise of more than 1,100 mostly Italian Web sites. Websense claims that more than 10,000 sites have been infected by now, 80% of them in Italy. There are indications that most of the Italian sites are resident at the same large Italian hosting provider. Trend Micro reports on the attack, which is launched from a malicious Iframe tag inserted into pages on compromised sites. For visitors to these sites, this begins a cascade of "drive-by" malware downloads if one of several targeted vulnerabilities is available and unpatched. The first page to which visitors are redirected by the Iframe hosts a recent version of Mpack attack software. Panda has a month-old report on Mpack (PDF) that provides copious detail about its nefarious ways.

Comments

Re: Viruses/Viri/Virii

[Anonymous Coward]

Two Points:

• English is an evolving language, and "virii" is fairly commonly used in the context of malware. Not being, as yet, recognized by "major dictionaries" is hardly a limitation on the use and adoption of industry-specific terminology.
  
• Surely by now everyone on \. is aware that, while somewhat informative, and often interesting, Wikipedia has never been deemed authoritative.
  

-AC