Hackers hit US Consulate General in Russia

Web pages belonging to the US Consulate General in St Petersburg were compromised by hackers earlier this week and used to host malicious code.

Cyber-criminals planted code known as Mal/ObfJS-C which attempts to load further malware from a remote server.

The malware included an additional script that attempted to exploit several browser vulnerabilities in order to install a Trojan on the computer of anyone viewing the site.

Fraser Howard, principal virus researcher at Sophos, said that the attack is part of a larger campaign by cyber-criminals which has infected around 400 web pages on vulnerable servers.

The majority of the compromised pages were hosted in Russia. Sophos said that the infected pages on the US Consulate General website had since been cleaned up.

"This latest attack highlights the fact that no organisation is immune from infection, and that no matter what the size of the company it must defend its web pages fully to avoid being stung," said Howard.

"Unfortunately, while high profile sites such as the US Consulate can be cleaned up quickly, a dangerous number of companies are failing to act responsibly to retain the sanctity of their sites."

See also:

Skipi worm jumps on Skype users

Beware chat messages bearing jpegs  12 Sep 2007

More P2P fraud victims expected

Criminals increasingly using peer-to-peer software to commit fraud  12 Sep 2007

Organised crime holding off on mobile viruses

Mostly the work of amateurs, say experts  12 Sep 2007

Ad-based Trojan hits MySpace, Bebo and others

Malware hidden in adverts  11 Sep 2007

Mumbai cyber-cafés told to use key-loggers

Police take action after terrorist attacks  11 Sep 2007

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!