We have confirmed multiple previously-known WebAttacker sites that are currently exploiting this vulnerability to install malicious software. Since this exploit has been confirmed on multiple sites, we suspect that the WebAttacker toolkit has been updated to include this exploit. We expect to see many of the several thousand WebAttacker sites begin to utilize the exploit, as they update to the latest release of the toolkit.
All sites known to be exploiting this code have been in the Malicious Web Sites category for several months. To address any new sites that appear, Websense has issued a database update via Real-Time Security Updates™ (RTSU) to block the latest version of the WebAttacker toolkit. While we have not discovered the exploit on any non-WebAttacker sites, we are monitoring for the exploit to appear at other locations and expect it will only be a matter of time before additional sites begin to utilize the exploit.
Type Éditeur de solutions
Rss
PDF
Salle de presse