NHS website affected by mass SQL 'Asprox' attack

Finjan reports a trojan attack this month affected over one thousand websites – including the one belonging to our very own NHS.

The National Health Service's official website, NHS.uk, was one of a thousand websites compromised by a massive web attack this month, according to Finjan.

In its latest blog, Finjan said that the attack was caused by a trojan toolkit called Asprox', which has been around for a while, gaining popularity during 2007.

The toolkit works by first searching Google for webpages with the file extension '.asp'. Once found, it launches an SQL injection attack, which appends a reference to the malware file using the iframe (SCRIPT) tag. The most serious attack of recent times was back in April when IT PRO reported on a SQL attack which affected half a million websites.

Each of the 1,000 or so different compromised websites included a reference to malware which was in turn served by 160 other internet domains.

Finjan chief technical officer Yuval Ben-Itzhak believed that as the malware serving domains were increasing, much more was to come from Asprox.

"Among the compromised websites we found were those of respectable organisations, governmental institutes, health care organisations as well as high-ranked websites," he said.

Another website said to be affected were atdmt.com, a digital media company which Microsoft are looking at acquiring. The official websites for the government of San Francisco and the University of California were also compromised.

Featured Resources

B2B under quarantine

Key B2C e-commerce features B2B need to adopt to survive

Download now

The top three IT pains of the new reality and how to solve them

Driving more resiliency with unified operations and service management

Download now

The five essentials from your endpoint security partner

Empower your MSP business to operate efficiently

Download now

How fashion retailers are redesigning their digital future

Fashion retail guide

Download now

Recommended

NHS adopts predictive AI tech from controversial startup
public sector

NHS adopts predictive AI tech from controversial startup

26 Apr 2021
NHS to digitise coronavirus testing with new Scandit deal
digital transformation

NHS to digitise coronavirus testing with new Scandit deal

8 Apr 2021
Gov 'forced into major U-turn' on NHS deal with Palantir, privacy group claims
Policy & legislation

Gov 'forced into major U-turn' on NHS deal with Palantir, privacy group claims

1 Apr 2021
Hancock reveals digital future of NHS
digital transformation

Hancock reveals digital future of NHS

18 Mar 2021

Most Popular

The benefits of workload optimisation
Sponsored

The benefits of workload optimisation

16 Jul 2021
Samsung Galaxy S21 5G review: A rose-tinted experience
Mobile Phones

Samsung Galaxy S21 5G review: A rose-tinted experience

14 Jul 2021
IT Pro Panel: Why IT leaders need soft skills
professional development

IT Pro Panel: Why IT leaders need soft skills

26 Jul 2021