• Web Hosting Forums
 

Web Host Companies Shared Hosting Servers Attacked by Malicious PERL Script

March 15, 2005 - (HOSTSEARCH.COM) – The Internet Storm Center (ISC) reported yesterday that a number of web hosting companies that provide shared hosting had their servers exploited and all of their customer homepages modified so that visitors are attacked.

“In one case, a Perl script was used to modify each customers homepage with the additional IFRAME snippet that fellow handler Lorna had already reported in the diary two days ago. The Perl script reads in the web server configuration (httpd.conf) on a compromised server, and then appends the malicious iframe code to all the index.html pages of all the virtual hosts available on this server. The same reader who managed to isolate this script has also contributed a script written by himself to clean up the affected pages,” said Daniel Wesemann on the ISC site, “If successful, the exploits drop either of two files "mhh.exe" or "sr.exe", both of which so far are only recognized by Kaspersky and called (not-a-virus:AdWare.ToolBar.SearchIt.h). The files have been submitted to the other AV vendors.”

blog comments powered by Disqus



Add HostSearch to
Google
Y! Myweb
Del.icio.us
Digg
Sphinn
Blink
Stumble
 

Find Web Hosting News
Search:
Web Hosting News Archive:
2012  2011  2010  2009  2008  2007  2006  2005  2004  2003  2002  2001  2000  1999  1998  
Search HostSearch.com
Subscribe to HostSearch Newsletters

Daily News
Monthly News


Top 3 Hosts From Our Search
Arvixe
LFC Hosting
Tilaa


HostGator
Our Network Web Hosting Company Partners
Add your host
Manage your listing
Advertising Info
HostSearch
Contact Us Site Map
Help Privacy Policy
About Us Copyright
Free Web Templates
Tutorial Guide
Templates
Design Questions
Design Resources and Inspiration
The Design Work
Websites Directory
Brand Identity Design
Free Fonts
© 1997- 2012 Clicksee Network Co., Ltd. All Rights Reserved