French embassy surrenders to hackers

Compromised site used to push malware

Written by Shaun Nichols in California

Experts are warning users to avoid a French embassy website after a page was found to be exposing users to malware.

The attack took place on the Libyan version of the embassy site. The malicious code is hidden within the page and cannot be seen upon entering the site.

Researchers from McAfee said that the malicious code is embedded in the page as an iframe tag. The tag allows the page to launch another page as an invisible one pixel by one pixel box.

The iframe box connects to a site in Hong Kong, which uses embedded iframes of its own to redirect to another site in the Ukraine. That site then attempts to run a browser exploit and install malware on the user's computer.

"Once again, we can see how people involved in such attacks use dedicated malicious websites in various countries to make it difficult to defeat them," researcher Francois Paget wrote on a company blog.

"It is especially difficult when an ISP accepts to host websites without verifying the lesser data the criminals enters when they register."

McAfee thinks that the attacks might be an effort to exploit public interest of Libyan dictator Moamer Khadafi's upcoming visit to France. The researchers compared the attacks to last summer's 'Italian Job' attacks in which travel and recreation sites were used to push malware on unsuspecting users.

Tags:

Further reading

Related articles

Cyber-attack launched from 10,000 web pages

Unsuspecting surfers redirected to site laden with malware   More...

Ad-based Trojan hits MySpace, Bebo and others

Malware hidden in adverts   More...

Hackers step up search results attack

Big-name sites compromised in IFrame redirect scam   More...

Hackers set up stolen FTP account trading floor

Database discovered containing more than 8,700 harvested FTP account details   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement