[btTech] Sony site offers up malware - Overclock.net

linskingdom · 07-03-08

Quote:

When you're browsing the seedier parts of the 'net, you know to be on your guard – but you can trust Sony, surely? Not according to Sophos.

The anti-virus vendor has highlighted several pages on Sony's PlayStation 3 website that are currently peddling fake anti-virus software thanks to an automated SQL injection attack that has compromised over 700 servers worldwide. According to Sophos, visitors to the pages are treated to a fake scan for malware before being cajoled into downloading 'free' software to 'fix' the problems that are found.

Graham Cluley, a senior technology consultant at Sophos, states that most of the “millions of video game lovers around the world” would “never expect that surfing to a website like this could potentially infect them with malware,” and suggests that without adequate protection – like, say, the software produced by his employer – users are likely to find that “before they know it they have been scared into handing their credit card details over to a bunch of cybercriminals.”

While protection on the desktop – whether that takes the form of a virus scanner or an alternative operating system – is important for end users, it has to be remembered that it's lax security on the part of a multinational corporation that has exposed users to unexpected threats. Although the SQL injection flaw that allowed the code to be inserted into the pages has since been fixed, there was an embarrassing delay between Sophos contacting Sony – and then rather rapidly publishing its article – and the hole being patched.

While I'm sure we all take adequate precautions when surfing the seedy underbelly of this world wide web, I can't help but wonder how many people would be fooled by something that appears to come from a large corporation like Sony.

Source

Turnoz · 07-03-08

lol SQL injections. Its not that hard to be protected against them....

Ecchi-BANZAII!!! · 07-03-08

bananas are eating mah trojans.
that's bad messed up

Captain Han · 07-03-08

Quote:

automated SQL injection attack

what does that mean

does that mean the servers are hacked? i thought those messages are mostly because of adwares not by servers.

Coma · 07-03-08

Wikipedia SQL injection... and automated of course means they are automated attacks - that is, bots run them on as many servers as possible, hoping to find vulnerable ones - just like viruses on computers.

		Overclock.net - Overclocking.net > Industry News > Video Game News
[btTech] Sony site offers up malware

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)