SQL Injection Attack
Since at least the Botnets have discovered more than 1800 Web sites vulnerable to SQL injection attacks. Member of the botnet is installed through Firefox Add-on. Hidden malicious code infection test of visited Web sites, and reports on the masterminds, the operators concerned "high power" vulnerability to botnets.
SQL injection attack sends commands directly to the database and the website, read the important data, and can sell to cheat or use it to further exploit vulnerabilities in Web applications.
Add-ons installed malicious code also contains a module that can steal passwords and personal data on the infected computer. Investigations by security expert Brian · Crebs sequence for this component, but has not been activated. Worldwide, over 12,500 Pc will be infected with malware. Pretend to install the add-on for Firefox "Microsoft.NET Framework Assistant"-but only the malicious code is installed in the real world, fell victim computers to a botnet.
Mozilla has harmful Add-ons is now be removed from the add-on Manager.
0 comments:
Post a Comment