A new SQL injection hack has topped more than one million infected sites with viewers directed to a site selling bogus anti-virus software.
The so-called 'Lilupophilupop' attack involves hacking the SQL database servers running on web server machines in what's known as an SQL injection attack.
SANS Internet Storm Center security researcher Mark Hofman first documented the attack and pointed out that websites worldwide including over 25,000 in the UK back in December were already infected by the attack.
Treatpost pointed out threat there are "dozens" of SQL attacks going on at any one time but more than a million infected by one variant "commands some attention."
Advertisement
Related Stories
- iOS update fixes bugs and security flaws May 8th 2012 at 5:45AM
- Microsoft fingers Chinese firm in RDP flaw leak May 4th 2012 at 3:00AM
- Microsoft fixes '0-day' Hotmail flaw Apr 30th 2012 at 12:19AM
- Global Payments breach of 1.5m credit cards Apr 3rd 2012 at 8:29AM
- Hacktivists lifted more data than criminal gangs Mar 22nd 2012 at 11:14PM
- Microsoft accused of leaking attack code Mar 18th 2012 at 9:30PM
- Lulzsec leader Sabu turned by the FBI Mar 7th 2012 at 1:15AM
- Over half of UK companies infected by malware Feb 13th 2012 at 11:57AM
- Google describes 'Bouncer' Android anti-malware system Feb 3rd 2012 at 6:41AM
- Apple OS X updates released Feb 2nd 2012 at 5:44AM
Add a new comment
You need to be logged in to post comments. If you do not have an account then please register.
Comments
0 comments
There are no comments yet, be the first to add one!