NHS website affected by mass SQL 'Asprox' attack
By Asavin Wattanajantra,
The National Health Service’s official website, NHS.uk, was one of a thousand websites compromised by a massive web attack this month, according to Finjan.
In its latest blog, Finjan said that the attack was caused by a trojan toolkit called ‘Asprox’, which has been around for a while, gaining popularity during 2007.
The toolkit works by first searching Google for webpages with the file extension '.asp'. Once found, it launches an SQL injection attack, which appends a reference to the malware file using the iframe (SCRIPT) tag. The most serious attack of recent times was back in April when IT PRO reported on a SQL attack which affected half a million websites.
Each of the 1,000 or so different compromised websites included a reference to malware which was in turn served by 160 other internet domains.
Finjan chief technical officer Yuval Ben-Itzhak believed that as the malware serving domains were increasing, much more was to come from Asprox.
“Among the compromised websites we found were those of respectable organisations, governmental institutes, health care organisations as well as high-ranked websites,” he said.
Another website said to be affected were atdmt.com, a digital media company which Microsoft are looking at acquiring. The official websites for the government of San Francisco and the University of California were also compromised.
advertisement
Latest Security Features
IT around the world: Russia
In the first of an on-going series examining IT markets around the globe, we look at whether investing in Russia is worth the risk – and how to go about it the right way.
- Chinese web control an Olympic challenge for tech firms
- SOS Bletchley Park
- Where will IT be in 2015?
- Q&A: John Stewart, Cisco's chief security officer
- NHS IT - something to celebrate?
- Q&A: Tom Ilube, head of Garlik
- Ten of the most infamous ‘black hat’ hackers
- USB Flash Disks: A modern day business curse?
- Creating a mobile data management policy
Latest Security Reviews
AVG Internet Security SBS Edition 8.0
Rating: ![]()
- Finjan Vital Security Web Appliance NG-6000S
- LogLogic MX2010
- Exclusive: WatchGuard Firebox Core X750e
- Sophos ES4000 Security Appliance
- Microsoft Forefront Security for Exchange and SharePoint
- EXCLUSIVE: Juniper Networks SSG 550 UTM appliance
- EXCLUSIVE: Arbor Networks Peakflow X 3.7
- EXCLUSIVE: Check Point UTM-1 1050
- EXCLUSIVE: Finjan Vital Security NG-5100
advertisement
Latest News Videos in Security
Video: Q&A with Richard Archdeacon, Symantec
IT PRO speaks to Richard Archdeacon, director, global services, at the information security software vendor Symantec.
White papers
Want more background on today's hottest IT trends?
Visit IT PRO's white paper library for more on virtualisation, encryption and other topics.
Register for IT PRO
You'll get exclusive member benefits including free white papers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.



Social Bookmark this article: What is this?