Early this morning I gave Caspar a heads up on this because he works with Windows servers but I just saw this article and now apparently the Department of Homeland Security are getting involved.
http://www.theregister.co.uk/2004/06...hits_websites/
The article is wrong though:
Quote:
|
For website proprietors, the best defence is to ensure that Web servers are fully patched and guarded against all attacks - particularly those running Internet Information Server (IIS), which seems to be a favourite of attackers due to previously revealed vulnerabilities.
|
The code infects
patched IIS servers:
http://isc.sans.org/diary.php?date=2004-06-24
Quote:
|
Home users, meanwhile, should shut down options like ActiveX on Internet Explorer, which is a mechanism used by malicious code to upload onto PCs. Some experts have gone as far as to recommend that users switch to Opera, Safari, Netscape or Mozilla, Internet Explorer's rival browsers.
|
More here:
http://slashdot.org/article.pl?sid=0...tid=172&tid=95