Last weekend the ISC (Internet Storm Center) was trying to track a large scale hack that infected site-hosting servers. By doing this they in sense turned all the hosted sites into distributors of a virus.
The ISC said that the attackers used both direct and indirect means to infect users. In some cases, a script was appended to all home pages of the sites hosted on the host servers and the script redirected visitors of those sites to a malicious site that actually infected anyone that visited it. ICS also found some proof that a DNS cache poisoning attack was part of the virus.
Staying one step ahead of anyone trying to track them. The hackers were using Dynamic DNS . The ICS said that the IP address for three different domains were all resolving to the one address (217.16.26.148).
The hackers that were behind the attack were quite skillful. As they "shifted" the target whenever an ISP (Internet Service Provider) started to block traffic or to shut down one of their servers.
So far, a week later, they still have no clue on who the hacker or hackers were.
Zimer
Hello
Well done!! I really enjoyed reading your blog. If I were you I would go to http://www.autosurfmonster.com and submit this blog so thousands of others can see it for free. well, I look forward to all the updates. Thanks again!
Jessica
Posted by: Jessica Kardon | September 09, 2006 at 02:25 AM