phpBB mass hack exposed

[Xy1]

Don't know if these forums are phpBB based... but here's a heads up :

The infected pages bring up what appears to be a pornographic web site. Upon loading the page, a 'fake codec' social engineering attack is attempted. The user is told that in order to view the movie on the page, a special video codec must be installed.

Full story here : http://www.itnews.com.au/News/72214,second-mass-hack-exposed.aspx

[badastronaut]

Powered by vBulletin®
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Powered by vBadvanced CMPS v3.0 RC2

Interesting story though. I don't know who would be desperate enough to let some "codec" download to watch a porn popup though. If someone gets infected, it's their own damn fault.

What's even scarier is the infections that occur for mousing over some banner ads! It's first appeared on WoWinsider, but it could potentially spread. Story here (http://www.wowinsider.com/2008/03/10/wowhead-and-other-sites-are-having-trouble-with-ad-banner-keylog/).

[Xy1]

yeah i noticed the Vbulletin right after posting.. hehe... thx

[Zero Hero]

Interesting, I wonder what version of phpbb are affected? Though the flash banner is quite an ordeal too. I've seen some crazy stuff on some sites where they pop-up a small activation script window when you mouse over a button, so that you click the 'accept file' window button instead of the main window if you are not paying attention.