Welcome to RCF - WHF

rb2d2 · Sep 25, 2004

Lizamoon SQL injection attacks step up fast to hit hundreds of thousands of websites

A mass injection attack dubbed Lizamoon is spreading rapidly and has infected up to more than 1.5 million URLs.

The attack was first announced by Websense on Tuesday, when the content-filtering firm said 28,0000 web pages had been infected.

"The Lizamoon mass injection is one of the largest mass injection campaigns we have ever seen," said Carl Leonard of Websense Security Labs.

The number of the compromised URLs is still increasing, and more domains or payload sites have started to be involved, in addition to the original lizamoon.com, he said. These include world-of-books.com, alexblane.com, and alias-carter.com.

The attack uses SQL injection techniques to insert rogue code into the databases of PHP and ASP websites.

Watch the video!

Shocked