Cyber Risks · Krebs on Security

Network Solutions Again Under Siege

Summary: For the second time in two weeks, hosting provider Network Solutions is working to contain a hacking incident that has left customer websites serving malicious code, with spokesman Shashi Bellamkonda apologizing in a Sunday blog post and declining to give details. Spokeswoman Susan Wade said the incident affects a subset of customers rather than the entire hosting platform, and security blogger David Dede noted this round hit WordPress, Joomla and plain HTML sites alike, with injected code redirecting visitors to pages that try to install malware via flaws in browser plugins such as Adobe PDF Reader and insecure ActiveX components.

Key Takeaway: The injected scripts spread across every site type on the platform, so a plain HTML site with no CMS to patch was compromised just as readily as a WordPress blog, and customers reported the malicious content being re-added within a minute of uploading a clean copy.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related