Search This Blog

Powered by Blogger.

Blog Archive

Labels

Dutch News website NU.nl hacked and serves Sinowal worm

The popular Dutch news website NU.nl has been injected with malicious Sinowal worm and infects all visitors who visited it on March 14,2012 between 11.30 and 12.30 ,

Dutch National Alerting Service informs that system belong to visitors who didn't updated to the latest version of Java and Adobe Reader are mostly infected with this malware.

The website has been injected with two malicious javascript file (g.js ,gs.js). These javascript files embed the payload from different sites.

The malware try to exploit the vulnerability in Adobe Reader version 8 and 9.3 , Between Java version 5 and version 6 and between 5.0.23 and 6.0.27.
If users has the vulnerable software, the worm will be loaded into victim system.

Share it:

Malware Report