Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus

LizaMoon SQL injection rogue AV
Over the last few days, a mass SQL injection attack has been quickly gathering speed. Just three days ago only 28,000 URLs were affected, but at the time of writing, there could be up to 3.8 million infected URLs.

Websense
has a complete write up the attack, dubbed 'LizaMoon,' but here's the basic gist: it looks like someone is exploiting a vulnerabilty (or vulnerabilities) in hundreds of thousands of websites running on Microsoft SQL Server 2003 and 2005. It's not yet known whether this is a vulnerability in SQL Server, or simply a case of outdated, unmaintained, and easily-exploitable CMSes.

The attack takes the form of an SQL injection, which then inserts a link to a JavaScript file hosted on the attacker's server. This is repeated over and over until every Web page in the SQL database has been infected -- and considering 3.8 million URLs have been infected, you can see that this is a very easy, and automated, attack.

Fortunately, the JavaScript isn't particularly malicious: it pops up a rogue AV program called Windows Stability Center, but that's it. Better yet, the rogue antivirus is already recognized by a bunch of real antivirus suites, including Avast, Panda and Microsoft Security Essentials.

The real problem with SQL injection attacks is that there's nothing we surfers can do about them. There will always be old and unmaintained websites, and thus SQL injections will remain one of the easiest and most lucrative tools of hackers and spammers alike. All you can do is keep your antivirus and anti-malware software up to date, and pray.

Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus originally appeared on Download Squad on Fri, 01 Apr 2011 05:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/massive-sql-injection-infects-3-8-million-urls-installs-rogue-a/

DISCOVER FINANCIAL SERVICES GOOGLE NOVELLUS SYSTEMS SYNNEX QIMONDA LEVEL 3 COMMUNICATIONS INFOCUS

Slickdeals' best in tech for October 15th: 60-inch Sharp AQUOS LCD HDTV and a slew of components

Looking to save some coin on your tech purchases? Of course you are! In this round-up, we'll run down a list of the freshest frugal buys, hand-picked with the help of the folks at Slickdeals. You'll want to act fast, though, as many of these offerings won't stick around long.

If you're looking to get a jump on some of your holiday shopping, perhaps this round of tech deals will provide the necessary motivation to do just that. A 60-inch Sharp AQUOS 1080p LCD HDTV tops the group, and a smattering of components round out the lot. Keep and eye on those pesky discount codes and rebate links, though, because we'd hate for you to miss out. Head on past the break to peruse the whole list.

Continue reading Slickdeals' best in tech for October 15th: 60-inch Sharp AQUOS LCD HDTV and a slew of components

Filed under: , , ,

Slickdeals' best in tech for October 15th: 60-inch Sharp AQUOS LCD HDTV and a slew of components originally appeared on Engadget on Mon, 15 Oct 2012 12:03:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceSlickdeals  | Email this | Comments

Source: http://www.engadget.com/2012/10/15/slickdeals-best-in-tech-for-october-15th/

IKON OFFICE SOLUTIONS HEWLETTPACKARD HYPERCOM NATIONAL INSTRUMENTS MOODYS COGNIZANT TECH SOLUTIONS FIRST SOLAR

Samsung Gets Sensible With Galaxy S III Mini

Samsung on Thursday announced the Galaxy S III mini, a smaller version of its Galaxy S III 4.8-inch smartphone. With a 4-inch screen, the S III mini is aimed at consumers who are looking for more practical smartphones, Samsung said. Does this mean the full-fledged Galaxy S III is impractical? Or could the statement be a swipe at the iPhone 5? "It means that the market is used to smartphones, and the new customers coming into the smartphone world are not the adventurous early adopters who pay a premium for any technology features," said Michael Morgan, senior analyst at ABI Research.

Source: http://ectnews.com.feedsportal.com/c/34520/f/632000/s/2462bad3/l/0L0Stechnewsworld0N0Crsstory0C763710Bhtml/story01.htm

NATIONAL INSTRUMENTS MOODYS COGNIZANT TECH SOLUTIONS FIRST SOLAR AMPHENOL QUALCOMM FEI COMPANY

Alt-week 10.13.12: is the Universe a simulation, cloning dinosaurs and singing mice

Alt-week peels back the covers on some of the more curious sci-tech stories from the last seven days.

Altweek 101312 is the Universe a simulation, cloning dinosaurs and singing mice

Are you reading this? Seriously, are you? Sure, we know you think you are, but what if you're just a sub-feature of a complex computer program. A sprite, nothing more than the creation of software. The problem with this question is, how would you ever know? You wouldn't, right? Well, not so fast there. Turns out, maybe there is a way to unravel the matrix (if there is one). It'll come as no surprise, that this is one of the topics in this week's collection of alternative stories. Think that's all we got? Not even close. We'll explore the truth behind cloning dinosaurs, as well a rare performance by singing mice -- all before dinner. Or is it really dinner? This is alt-week.

Continue reading Alt-week 10.13.12: is the Universe a simulation, cloning dinosaurs and singing mice

Filed under: ,

Alt-week 10.13.12: is the Universe a simulation, cloning dinosaurs and singing mice originally appeared on Engadget on Sat, 13 Oct 2012 17:00:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/aRYpZT5FKZM/

SYMANTEC INVENTEC QUEST SOFTWARE JDA SOFTWARE GROUP OPENWAVE SYSTEMS EASTMAN KODAK CO VARIAN SEMICONDUCTOR EQUIPMENT ASSOCIATES

Deutsche Telekom: T-Mobile / MetroPCS merger to be completed by June 2013

Deutsche Telekom MetroPCS merger to be completed by June 2013

Just precisely how the T-Mobile / MetroPCS merger will pan out still seems yet to be decided. What is clear, however, is that majority share-holder, Deutsche Telekom, hope to have the deal done and dusted between April and June next year. CFO for the German giant, Timotheus Hoettges, told Boersenzeitung that we'll have to wait until the second quarter of 2013 before one of the parties will have to start ordering new stationary and corporate polo shirts. In the meantime he was keen to point out that not all current financial arrangements should feel ause for concern, noting shareholders wouldn't have their remuneration policy affected by the merger, thanks to the spiffy financial year it's had.

Filed under: , ,

Deutsche Telekom: T-Mobile / MetroPCS merger to be completed by June 2013 originally appeared on Engadget on Sat, 13 Oct 2012 14:28:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceReuters  | Email this | Comments

Source: http://www.engadget.com/2012/10/13/deutsche-telekom-t-mobile-metropcs-merger/

NVIDIA SHAW COMMUNICATIONS ON SEMICONDUCTOR SAIC TERADATA QUANTUM SATYAM COMPUTER SERVICES

Microsoft and Partners Start Taking Windows 8 Software and Device Pre-Orders

One of five whimsical Windows 8 Pro upgrade package designs, available for pre-order on Friday. Image: Microsoft

Microsoft opened up pre-orders for several upcoming products on Friday, giving people the opportunity to be among the first to upgrade to Windows 8 Pro or get their hands on a Windows 8 device. The company announced in a blog post that consumers can now reserve a copy of its Windows 8 Pro upgrade package, as well as pre-order Windows 8 devices from select manufacturing partners.

Microsoft is making the $70 physical Windows 8 upgrade package available through several retailers. In the U.S., you can start pre-ordering through the Microsoft online store, Amazon, Best Buy, Staples, Office Depot, and local stores.

But pre-ordering a boxed version of the software won’t make the most sense for budget-conscious — or just practical — consumers. Starting Oct. 26, consumers who purchased a Windows 7 device between June 2, 2012 and Jan. 3, 2013 can upgrade to Windows 8 Pro for $15 through Windows.com, while others users with Windows XP, Vista and Windows 7 will be able to upgrade online for $40.

Many Windows 8 PCs, tablet, and hybrids — or laplets, as Gadget Lab likes to call them — are also on show for pre-order Friday. Specifically, devices from Acer, ASUS, Dell, HP, Samsung and Sony are available. Most of these have an estimated delivery date between 14 and 21 days, putting arrivals between Oct. 26 and Nov. 2. For example, Dell’s online store says that its devices will ship Oct. 25. Dell also announced that its convertible laptop, the XPS 12, will be available for $1200.

While most manufacturers have released pricing details for upcoming Windows 8 devices, Microsoft has yet to reveal how much its Surface RT tablet will cost. And there are even fewer details about Surface Pro, the version of the tablet running Windows 8 Pro, which does not yet have a set release date or price.

Source: http://www.wired.com/gadgetlab/2012/10/microsoft-preorders/

MCAFEE MICROSEMI UNISYS TAKETWO INTERACTIVE SOFTWARE SYKES ENTERPRISES INORATED IOMEGA LAM RESEARCH

Kicking Back in the Online Social Gaming Scene

Online gaming is big business, and one of the fastest-growing segments of the online game market is casual gaming -- simple games that can be played on websites, through social media sites like Facebook, or on mobile devices. "The casual games appeal to a broad market because they don't involve an enormous time commitment or uninterrupted attention," said Keela Robison, VP of operations for GameHouse. "You can play for five minutes at a time while you're waiting for a bus or holding on the phone."

Source: http://ectnews.com.feedsportal.com/c/34520/f/632000/s/2467eaac/l/0L0Stechnewsworld0N0Crsstory0C763590Bhtml/story01.htm

FISERV DIGITAL CHINA HOLDINGS ARIAN SEMICONDUCTOR EQUIPMENT PRICELINECOM ASUSTEK COMPUTER CISCO SYSTEMS FINISAR

Sweden: Pirate Haven No More?

The recent events surrounding the raid of a Web hosting firm in Sweden have spilled over to the outside world, triggering an attack by Anonymous on several bank, university and government websites in Sweden. The events trace back to the Oct. 1 arrest of Pirate Bay cofounder Gottfrid Svartholm Warg, which happened the same day police raided PRQ, a controversial Web host that is home to several torrent sites and others that feature unsavory content. The Pirate Bay, which formerly used the hosting services of PRQ, also went down the same day, but attributed its outage to a power failure.

Source: http://ectnews.com.feedsportal.com/c/34520/f/632000/s/2452a94b/l/0L0Stechnewsworld0N0Crsstory0C763530Bhtml/story01.htm

VERISIGN LINEAR TECHNOLOGY RF MICRO DEVICES RADISYS FAIR ISAAC AUTODESK SRA INTERNATIONAL