We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

McAfee: French Embassy site serving malware

Libya website attacked using iFrame exploit

The French Embassy website for Libya is serving malware to visitors, according to security software firm McAfee.

McAfee said the site has been attacked using an iFrame exploit that inserts an invisible frame in the page in order to re-direct some web browser connections to another location, which serves up a 'downloader', code that attempts to reside on the victim machine. The problem has been reported to the French government.

If the downloader is successful, the attacker can then remotely attempt to download other malware, "typically a bot or a password-stealing Trojan," said Dave Marcus, McAfee security researcher and communications manager.

Marcus says Paget, a researcher with tools to scan scripts and investigate code behaviour, happened by chance to be looking at the French Embassy website for Libya and discovered the attack code on it. The incident is similar to discoveries made by security researchers of other compromised Web sites spewing attack code, including that of the Bank of India and the MySpace page of Alicia Keys.

McAfee says the attack on the French website is being carried out via routing through a Hong Kong provider and then to sites in Russia and the Ukraine.


IDG UK Sites

Nexus 6 vs Sony Xperia Z3 comparison: Lollipop phablet takes on KitKat flagship smartphone

IDG UK Sites

Why people aren't upgrading to iOS 8: new features are for power users, not the average Joe

IDG UK Sites

Free rocket & space sounds: NASA launches archive of interstellar audio on SoundCloud

IDG UK Sites

iPad Air 2 review: Insanely fast and alarmingly thin. Speed tests, camera tests, beautiful...