SQL injection

Newsfeed

Nachrichtenbote
SQL injection is a type of attack that is growing in popularity. Not only is it used to make popular websites serve malware (example 1, 2) but it's also used to steal information and to show that an attack is possible.

During the last few days a Romanian group has been doing SQL injection attacks on several security vendor's websites and early this morning they hit us. One of our servers used in gathering malware statistics had a page that didn't properly sanitize input and therefore was vulnerable to an attack. Fortunately we utilize defense-in-depth strategies so the attack was only partly successful.

Although the attackers was able to read information from the database they couldn't write or manipulate it. And they couldn't access any other data on that server because the SQL user only had access to its own database, which only contains public information that is shown on our statistics pages. So while the attack is something we have to learn from and look at things we need to improve, it's not the end of the world. The malware statistics is something we publish anyway at F-Secure Worldmap and because of our IT security strategy, the impact was minimal. On 12/02/09 At 06:45 AM



Weiterlesen...
 
Zurück
Oben