Forest Global Training Partners

Cyber Risks · Krebs on Security

Pill Pushers Pop Military, Government, Education Sites

Summary: A Hostmonster.com customer exploited a bug in the CPanel web administration tool to create nearly four dozen subdomains on other customers' sites between April 2 and July 1, 2010, linking them to pages that hijacked search rankings and redirected visitors to rogue online pharmacies. The bogus subdomains remained in place until a reporter contacted the company, even though Hostmonster says it fixed the CPanel flaw in July 2010 without removing the entries already created.

Bottom line: Compromised domains included Ejercito.mil.do, the Dominican Republic Army's official site, Sacmetrofire.ca.gov, and Wi.edu - and the pages sat there for roughly six months after the fix, because patching the bug did not clean up what it had already let through.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related