We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
79,812 News Articles

Kaspersky website defaced by hacker

Security firm tackles Malaysian attack

Security company Kaspersky Lab's Malaysian website was defaced on Saturday along with one of its online shopping sites, according to Zone-H, an organisation that documents such attacks.

The attacker, nicknamed 'm0sted', wrote that the site was compromised through SQL injection, wrote Roberto Preatoni on a Zone-H posting.

The attack involves inputting code into a form on a web page in an attempt to get the back-end database to respond. It can enable the hacker to gain control over the website.

Kaspersky has since locked down the site, which is apparently running Microsoft's Internet Information Services web server. The site is no longer open to the public and requires a user name and password for access.

Images of the hack posted on Zone-H show repeated subjects in the left-hand news section reading "hacked by m0sted and amen Kaspersky Hax0red No War". Other secondary pages were also compromised, Preatoni wrote.

Kaspersky could not be immediately reached for a comment. But Preatoni said that while the attacks appear to be just vandalism, there could be more serious risks.

Evaluation copies of Kaspersky's security software are distributed on the sites, Preatoni wrote. It might have been possible for an attacker to upload malicious software labelled as Kaspersky's software, which would dupe users into thinking the file is okay.

Zone-H has included a log of other times Kaspersky's site has been hacked. But Kaspersky isn't the only security company to have trouble keeping meddlers at bay.

In March, Trend Micro's website was one of tens of thousands affected by a wide-ranging attack that inserted JavaScript code to direct visitors to a malicious web server in China. Security vendor CA's website was struck with similar problems in January.

For more security news, reviews and tutorials, see Security Advisor


IDG UK Sites

45 Best Android games: top Android games for your smartphone or tablet in 2014 (24 are free!)

IDG UK Sites

How Apple, Adobe, Microsoft and others have let us down over UltraHD and hiDPI screens

IDG UK Sites

Do you have the X-Factor too? Mix Off app puts fans in the frame

IDG UK Sites

iPad Pro release date, rumours and leaked images - 12.9 screen 'coming in 2015'