Hackers managed to attack security company Kapersky’s website at the weekend prompting people into downloading fake anti-virus software.

Scammers took advantage of a bug in a web program used by security company Kaspersky at the weekend and reprogrammed it to install malicious software.

The attack meant that when someone visited the site a pop-up window would appear that simulated a virus scan of the user’s computer. It then offered to install an antivirus program which turned out to be a fake.

Hackers took advantage of a vulnerability in a third-party application that is used for managing the web content, rather than the website itself.

Kaspersky confirmed that the website was simulating a Windows XP Explorer window to trick users into thinking it was genuine.

A Kaspersky spokesman confirmed to Web User that its website was redirecting users to the malicious site for around three hours on Sunday.

He said: “Upon being notified about the vulnerability, company personnel took immediate action to address the issue, and the affected server was taken offline within 10 minutes.”

“Immediately following this, all vulnerable components were removed from the server and clean files were restored. The server is secure and fully back online, and Kaspersky products are available for download,” the spokesman continued.

Kaspersky Lab also stressed to Web User that no individual’s details were compromised from the company’s servers during the attack.

Source

Related Post

  • March 18, 2010 -- New password-stealing virus targets Facebook (0)
    Hackers have flooded the Internet with virus-tainted spam that targets Facebook's estimated 400 million users in an effort to steal banking passwords ...
  • March 24, 2010 -- Firefox releases security patch (0)
    Firefox 3.6.2 was originally due to launch at the end of March, but is available to download now from the Mozilla website. The security hole had le...
  • March 18, 2010 -- Pwn2Own predictions: iPhone will be hacked (0)
    Hackers at this year’s CanSecWest Pwn2Own contest will definitely break into an Apple iPhone by exploiting a remote code execution vulnerability. ...