Sony Playstation site

[klbs-RFC 21]

July 2nd, 2008

One of the most recent sites to fall to waves of recent SQL injections is Sony's Playstation U.S. site. Researchers at Sophos have warned its users that pages on the site have been compromised. Experts at Sophos have confirmed hackers have successfully managed to use an SQL injection attack to plant malicious code on the pages that promote 'Singstar Pop' and 'God of War'. The code runs a fake anti-virus scan and displays false messages telling the user they are infected.

http://blogs.zdnet.com/security/?p=1394

McBoyd's fault ?

[McBoyd 355]

July 2nd, 2008

One of the most recent sites to fall to waves of recent SQL injections is Sony's Playstation U.S. site. Researchers at Sophos have warned its users that pages on the site have been compromised. Experts at Sophos have confirmed hackers have successfully managed to use an SQL injection attack to plant malicious code on the pages that promote 'Singstar Pop' and 'God of War'. The code runs a fake anti-virus scan and displays false messages telling the user they are infected.

http://blogs.zdnet.com/security/?p=1394

McBoyd's fault ?

The purpose of this wave of attacks seems to be to dupe users into installing the same fake anti-virus software SophosLabs discovered on .MOBI websites earlier this week. Numerous malicious websites making use of the unusual .MOBI top level domain attempted to load a script ‘AD.JS’ located in root of each site. This in turn attempted to load another website - a fake anti-virus install site. The site pretends to do an online virus scan:

Too many people download/install rubbish that pops up on internet sites and tells you, you need it.

Its like believing one of those "YOU SIR ARE THE 1,000,000 PERSON ON THIS SITE, YOU WIN A FREE DOG.."

Also, the FAKE scan that appears is this...

And if your a VISTA, LINUX, MAC use?