Asprox zombies target Microsoft's Active Server Pages.

Edited by Zeid Nasser Asprox zombies have recently been blessed with a tool that sniffs out potentially vulnerable sites running Microsoft's Active Server Pages and then tries to commandeer them using SQL injections. When infections are successful, the pages then redirect visitors to

websites that silently install a malware cocktail that includes the Asprox malware. The vicious cycle gives the scheme worm-like capabilities.SQL injection attacks have emerged as the flavor of the month for criminals looking for ways to spread their malware. The seemingly endless supply of servers that haven't been properly locked down by administrators makes them easy to carry out. Once infected, legitimate websites, some of them operated by the Department of Homeland Security and other high-profile organizations, become a means for transmitting malware to thousands of end users' PCs.So far, Asprox zombies have infected only about 1,000 pages, which carry javascript pointing to sites including direct84.com and adword71.com. In addition to silently feeding end users Asprox malware, poisoned pages also push malware for a botnet known as Cutwail. The sites also try to install WinFixer, a title that falsely tells users are infected by malware in an attempt to trick them into buying bogus anti-malware products. A*Asprox zombies target Microsoft's Active Server Pages

2003 Jordan Press & publishing Co. All rights reserved.

Provided by Syndigate.info an Albawaba.com company