Malware attack infects more than 100,000 web sites

Malware attack infects more than 100,000 web sites

A new online malware attack has claimed more than 100,000 web sites since this past Sunday and the number keeps on growing, a report from the online security firm Sucuri says.

The origin of the malware is Russia and all affected web sites run WordPress. The attack so far has prompted Google to blacklist more than 11,000 of the affected domains. The malware does its evil deeds through a previously known vulnerability in a WordPress plug-in called Slider Revolution and modifies the wp-includes/template-loader.php file, causing the wp-includes/js/swobject.js file to be loaded on every page on the site, which in turn loads the malware from a Russian website.

Not everyone is affected but if you run WordPress via Internet Explorer you might become a victim. In addition to that the yet unnamed malicious software makes use of a number of new backdoor payloads, some of which get injected into images to further assist evasion while others are being used to inject new administrator users into vulnerable WordPress installs. Unfortunately the malware is not easy to stop or remove – if you delete the aforementioned files this will not address the leftover backdoors and initial entry points. The only way to get rid of the malware is to make sure that the Slider Revolution plug-in is up to date but this is not easy – some web sites do not even know that they have the plug-in.

In the meantime you can find out if your web site is affected here – just use Sucuri’s free site scanner.

Source: Techspot.com

Related posts

ASUS launches GeForce GTX 950 Mini video card

ASUS launches GeForce GTX 950 Mini video card

Following the trend AMD set with its Radeon R9 Nano video card, the Taiwanese hardware maker ASUS has announced the market launch of a smaller GeForce GTX 950 video card, known as GeForce GTX 950 Mini. The new card comes with the GTX950-M-2GD5 code name and as you can see it houses 2 GB of GDDR5...

Lenovo releases the LaVie Z notebook

Lenovo releases the LaVie Z notebook

The Chinese computer maker Lenovo has started the sales of the new LaVie Z notebook. The device is a small-sized notebook with excellent performance and weight of just 848 grams. The LaVie Z will be offered in two versions – a regular one and a version with a sensor display that can be...

be quiet! presents Pure Wings 2 cooling fans

be quiet! presents Pure Wings 2 cooling fans

The German maker of power supply units and various cooling solutions be quiet! has announced the new Pure Wings 2 series of PWM cooling fans. The new fan line comes with various improvements when compared to the older Pure Wings line that include enhanced reliability, extremely low noise levels...

Leave a comment