SQL Injection Attack happening ATM, 4000+ sites infected

Worker Joined: Aug 02, 2004 Posts: 165

There has been got Only registered users can see links on this board! Get registered or login! of sites being injected with php-string. Typically code is inserted into several tables. From the information gathered so far it looks targeted at ASP, IIS and MSSQL backends, but that is just speculation.

When discovered yesterday about 80 sites showed in Google, this morning about 200, by lunch 1000 and a few minutes ago 4000+.

The attack seems to work on all versions of MSSQL.

Have you seen this kind of attacks today?

registered · Posted: Fri Dec 02, 2011 8:43 am

I have never felt safe running php on a windows server. I know Apache and MySQL have there own risks, but the Linux permission system works well if configured and used correctly.

Worker Joined: Mar 30, 2009 Posts: 132

nuken wrote:

I have never felt safe running php on a windows server. I know Apache and MySQL have there own risks, but the Linux permission system works well if configured and used correctly.

I have never felt safe running anything windows.

I know honestly your never 100% safe, But I use linux for the security

and totally agree on the nix perm system. with that and keeping up with security updates on the linux side of things and just being smart. your mostly safe

Theme Guru Joined: Jan 11, 2006 Posts: 170

Here's a good resource on the subject: http://us.norton.com/theme.jsp?themeid=mislead

But since everyone here seems to be Linux users it possibly doesn't apply. If a windows user drops in it may become relevant to them.