Researchers at Armorize Technologies reported that as many as five million parked domains belonging to customers of Network Solutions fell victim to an infected widget and were serving up a side order of malware.
Armorize has notified Network Solutions, which told eWEEK it is investigating the situation and can’t confirm how many domains may have been affected. According to Armorize, however, the now-disabled widget had been installed on at least 500,000 parked domains, and possibly five million.
“[The widget] was hacked, as proved by the webshell that Google caches,” Huang told eWEEK. “The attacker had full control.”
Google listed more than 500,000 results when keywords for parked domains are used, while Yahoo search lists some five million.
The widget launched a drive-by attack against users running Internet Explorer, Google Chrome, Firefox and Opera. The malware modifies the registry, monitors for the browsers, redirects search engine users and generates pop-up advertisements depending on whether certain search terms are entered. It also renames itself to a list of popular software programs and calls out to a control URLs for further instructions.
According to Network Solutions, the widget was used to provide small business tips on pages that were under construction.
“We have removed the widget from those pages and continue to check and monitor to ensure security…If you have downloaded the GrowSmartBusiness widget to your website, we recommend you delete that widget and scan your site for malware,” the company said in an alert.
Relief for Apple, Samsung etc after smartphone shipments are predicted to recover in 2024, as…
Beijing reportedly begins blocking the use of Intel and AMD chips in government computers, and…
Swedish telecoms giant Ericsson blamed “challenging mobile networks market” and “further volume contraction” for job…
Dramatic downfall. Sam Bankman-Fried sentenced to 25 years in prison for masterminding $8bn fraud that…
Fallout avoidance? Tesla buyers in the US must be shown how to use the FSD…
Amazon completes its $4bn investment into AI firm Anthropic, after providing an additional $2.75bn in…