IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

NHS website affected by mass SQL 'Asprox' attack

Finjan reports a trojan attack this month affected over one thousand websites – including the one belonging to our very own NHS.

The National Health Service's official website, NHS.uk, was one of a thousand websites compromised by a massive web attack this month, according to Finjan.

In its latest blog, Finjan said that the attack was caused by a trojan toolkit called Asprox', which has been around for a while, gaining popularity during 2007.

The toolkit works by first searching Google for webpages with the file extension '.asp'. Once found, it launches an SQL injection attack, which appends a reference to the malware file using the iframe (SCRIPT) tag. The most serious attack of recent times was back in April when IT PRO reported on a SQL attack which affected half a million websites.

Each of the 1,000 or so different compromised websites included a reference to malware which was in turn served by 160 other internet domains.

Finjan chief technical officer Yuval Ben-Itzhak believed that as the malware serving domains were increasing, much more was to come from Asprox.

"Among the compromised websites we found were those of respectable organisations, governmental institutes, health care organisations as well as high-ranked websites," he said.

Another website said to be affected were atdmt.com, a digital media company which Microsoft are looking at acquiring. The official websites for the government of San Francisco and the University of California were also compromised.

Featured Resources

Four strategies for building a hybrid workplace that works

All indications are that the future of work is hybrid, if it's not here already

Free webinar

The digital marketer’s guide to contextual insights and trends

How to use contextual intelligence to uncover new insights and inform strategies

Free Download

Ransomware and Microsoft 365 for business

What you need to know about reducing ransomware risk

Free Download

Building a modern strategy for analytics and machine learning success

Turning into business value

Free Download

Recommended

Secretary of State retires NHS Digital and NHSX
public sector

Secretary of State retires NHS Digital and NHSX

23 Nov 2021

Most Popular

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack
hacking

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack

16 May 2022
Windows Server admins say latest Patch Tuesday broke authentication policies
Server & storage

Windows Server admins say latest Patch Tuesday broke authentication policies

12 May 2022
IT admin deletes company’s databases and is jailed for seven years
Policy & legislation

IT admin deletes company’s databases and is jailed for seven years

16 May 2022