We've had some reports of this and at this point we're suspecting a false positive situation from Avast anti virus users. If you see this again post or email us at support@mmorpg.com and we'll look into it further.
10,000 web pages infected by password hack this week
Hackers looking to steal passwords used in popular online games have infected more than 10,000 web pages in recent days.
The web attack, which appears to be a coordinated effort run out of servers in China, was first noticed by McAfee researchers on Wednesday morning. Within hours, the security company had tracked more than 10,000 web pages infected on hundreds of websites.
McAfee isn't sure how so many sites have been hacked, but "given how quickly some of these attacks have come on, it does seem like some automation has gone on", said Craig Schmugar, a researcher with McAfee's Avert Labs. In the past, attackers have used search engines to scour the internet for vulnerable websites and then written automated tools to flood them with attacks, which ultimately let criminals use legitimate sites to serve up their malicious code.
The infected websites look no different than before, but the attackers have added a small bit of JavaScript code that redirects visitors' browsers to an invisible attack launched from the China-based servers. This same technique was used a year ago, when attackers infected the websites of the Miami Dolphins and Dolphins Stadium just prior to the 2007 Super Bowl XLI football game.
The attack code takes advantage of bugs that have already been patched, so users whose software is up-to-date are not at risk. However, McAfee warns that some of the exploits are for obscure programs such as ActiveX controls for online games, which users may not think to patch.
If the code is successful, it then installs a password-stealing program on the victim's computer that looks for passwords for a number of online games, including the Lord of the Rings Online.
These online game passwords are a popular hacker target, in part because many online gaming resources can be stolen and then sold for cash.
"If we don't attack them, they will attack us first. So we'd better retaliate before they have a chance to strike"
You know all of the talent that is performing these attacks can't be all there is in the realm of people capable of doing this sort of thing.... How about some of you guys that are just as talented if not more so do the same damn thing to them only plus it up some so that they get Herpes when they power up their system or go into an Epileptic fit anytime they open up an internet browser...
It's easy to attach a virus to a flash ad or some other ad.
I have a friend who works for an Ad agency, he says they get those all the time. About 5% slip through checks and manage to infect about 5% of people who view the ad...
Chances are, it's some Flash Advertisement on the page someplace. It's a repeated problem here on MMORPG.com though, once every few months. They should check with the supplying Ad Agency about it... not us having to worry, or block the Ad so they don't get paid to keep the website going.
- CaesarsGhost
Lead Gameplay and Gameworld Designer for a yet unnamed MMO Title. "When people tell me designing a game is easy, I try to get them to design a board game. Most people don't last 5 minutes, the rest rarely last more then a day. The final few realize it's neither fun nor easy."
Comments
And of course, now it is not happening anymore.....
We've had some reports of this and at this point we're suspecting a false positive situation from Avast anti virus users. If you see this again post or email us at support@mmorpg.com and we'll look into it further.
- MMORPG.COM Staff -
Could it be related to this?
http://www.computerworlduk.com/management/security/cybercrime/news/index.cfm?newsid=7973
10,000 web pages infected by password hack this week
Hackers looking to steal passwords used in popular online games have infected more than 10,000 web pages in recent days.
The web attack, which appears to be a coordinated effort run out of servers in China, was first noticed by McAfee researchers on Wednesday morning. Within hours, the security company had tracked more than 10,000 web pages infected on hundreds of websites.
McAfee isn't sure how so many sites have been hacked, but "given how quickly some of these attacks have come on, it does seem like some automation has gone on", said Craig Schmugar, a researcher with McAfee's Avert Labs. In the past, attackers have used search engines to scour the internet for vulnerable websites and then written automated tools to flood them with attacks, which ultimately let criminals use legitimate sites to serve up their malicious code.
The infected websites look no different than before, but the attackers have added a small bit of JavaScript code that redirects visitors' browsers to an invisible attack launched from the China-based servers. This same technique was used a year ago, when attackers infected the websites of the Miami Dolphins and Dolphins Stadium just prior to the 2007 Super Bowl XLI football game.
The attack code takes advantage of bugs that have already been patched, so users whose software is up-to-date are not at risk. However, McAfee warns that some of the exploits are for obscure programs such as ActiveX controls for online games, which users may not think to patch.
If the code is successful, it then installs a password-stealing program on the victim's computer that looks for passwords for a number of online games, including the Lord of the Rings Online.
These online game passwords are a popular hacker target, in part because many online gaming resources can be stolen and then sold for cash.
"If we don't attack them, they will attack us first. So we'd better retaliate before they have a chance to strike"
You know all of the talent that is performing these attacks can't be all there is in the realm of people capable of doing this sort of thing.... How about some of you guys that are just as talented if not more so do the same damn thing to them only plus it up some so that they get Herpes when they power up their system or go into an Epileptic fit anytime they open up an internet browser...
I am an Avast user as well and got the warning about a Trojan.. but it was only one time this evening.
It's easy to attach a virus to a flash ad or some other ad.
I have a friend who works for an Ad agency, he says they get those all the time. About 5% slip through checks and manage to infect about 5% of people who view the ad...
Chances are, it's some Flash Advertisement on the page someplace. It's a repeated problem here on MMORPG.com though, once every few months. They should check with the supplying Ad Agency about it... not us having to worry, or block the Ad so they don't get paid to keep the website going.
- CaesarsGhost
Lead Gameplay and Gameworld Designer for a yet unnamed MMO Title.
"When people tell me designing a game is easy, I try to get them to design a board game. Most people don't last 5 minutes, the rest rarely last more then a day. The final few realize it's neither fun nor easy."