Malware Pulls an "Italian Job"

A number of readers sent us word about a malware attack that has been underway since Saturday that began with the compromise of more than 1,100 mostly Italian Web sites. Websense claims that more than 10,000 sites have been infected by now, 80% of them in Italy. There are indications that most of the Italian sites are resident at the same large Italian hosting provider. Trend Micro reports on the attack, which is launched from a malicious Iframe tag inserted into pages on compromised sites. For visitors to these sites, this begins a cascade of "drive-by" malware downloads if one of several targeted vulnerabilities is available and unpatched. The first page to which visitors are redirected by the Iframe hosts a recent version of Mpack attack software. Panda has a month-old report on Mpack (PDF) that provides copious detail about its nefarious ways.

Comments

Why do they never come right out and say...

[Chris Tucker]

...that it's Windows machines that get 0wned.

Don't use Windows, don't get 0wned.

Re:Because it's all...

[hdparm]

STFU MSn00b

Re:It's all Microsoft vulnerabiltiies

[wellingj]

What about:

1. Run Ubuntu Live Install.

That should take care of it once and for all...