Hacked Widget Compromises Parked Domains

Researchers at Armorize Technologies reported that as many as five million parked domains belonging to customers of Network Solutions fell victim to an infected widget and were serving up a side order of malware.

Armorize has notified Network Solutions, which told eWEEK it is investigating the situation and can’t confirm how many domains may have been affected. According to Armorize, however, the now-disabled widget had been installed on at least 500,000 parked domains, and possibly five million.

Parked domains are domains that have been registered but have no owner-provided content. According to Armorize chief technology officer Wayne Huang, many of his company’s customers were found to be serving malware the company linked to the ‘Small Business Success Index’ widget by Network Solutions.

“[The widget] was hacked, as proved by the webshell that Google caches,” Huang told eWEEK. “The attacker had full control.”

Up To Five Million Compromised

Google listed more than 500,000 results when keywords for parked domains are used, while Yahoo search lists some five million.

The widget launched a drive-by attack against users running Internet Explorer, Google Chrome, Firefox and Opera. The malware modifies the registry, monitors for the browsers, redirects search engine users and generates pop-up advertisements depending on whether certain search terms are entered. It also renames itself to a list of popular software programs and calls out to a control URLs for further instructions.

According to Network Solutions, the widget was used to provide small business tips on pages that were under construction.

“We have removed the widget from those pages and continue to check and monitor to ensure security…If you have downloaded the GrowSmartBusiness widget to your website, we recommend you delete that widget and scan your site for malware,” the company said in an alert.

Brian Prince eWEEK USA 2014. Ziff Davis Enterprise Inc. All Rights Reserved

Recent Posts

Smartphone Shipments To Rebound In 2024, Says Counterpoint

Relief for Apple, Samsung etc after smartphone shipments are predicted to recover in 2024, as…

22 mins ago

Ericsson To Cut 1,200 Jobs in Sweden Amid ‘Challenging’ Market

Swedish telecoms giant Ericsson blamed “challenging mobile networks market” and “further volume contraction” for job…

21 hours ago

FTX’s Sam Bankman-Fried Sentenced To 25 Years In Prison For $8bn Fraud

Dramatic downfall. Sam Bankman-Fried sentenced to 25 years in prison for masterminding $8bn fraud that…

22 hours ago

Elon Musk Orders FSD Demo For Every Tesla US Sale

Fallout avoidance? Tesla buyers in the US must be shown how to use the FSD…

23 hours ago

Amazon Pumps Another $2.75 Billion Into Anthropic

Amazon completes its $4bn investment into AI firm Anthropic, after providing an additional $2.75bn in…

1 day ago