Websense: ANI Zero-Day Update
Websense Security Labs(TM) is actively tracking more than 100 websites that are spreading the ANI "zero-day" exploit. Proof-of-concept (POC) attack code is also now available, and we expect additional attacks to surface.More here.
Currently the majority of the attacks appear to be downloading and installing generic password stealing code. Also, as represented in the below graphs, most sites are hosted in China. Interestingly the most popular domain space being used is .com.
Due to the fact that POC code is now downloadable on the web, there is no patch from Microsoft, and the fact that some of the attackers we are tracking have infected hundreds of sites on the web, we believe that exploits will continue to surface and the numbers will get larger.
posted by Fergie @ 3/31/2007 04:18:00 PM
2 Comments:
i just stumbled into here. i strongly suspect that your page is going to become a staple of my tech-news reading. mad props.
Thanks for the kind words.
- ferg
Post a Comment
<< Home