Hackers attack again

14th January 2008

Experts on computer security noted massive hackers attack carried out by using the method of the so-called SQL Injection. SQL Injection attacks are based on incorrect server`s processing incoming data used in SQL queries. Through the injection, an attacker, in particular, may execute an arbitrary query to the database, read the contents of any tables or delete all information.
According to ComputerWorld, during an attack, unidentified attackers used exploits for a number of previously identified holes in the software. In particular, the malicious code was distributed through vulnerabilities in the player RealPlayer, as well as through the gap in the Microsoft Data Access Components (MDAC) - a set of software modules providing access to a variety of databases.
For a few days the criminals have managed to hit more than 70 thousand web pages in different domain zones, including .edu and .gov. The sites of the company Computer Associates were also affected, specializing in developing tools of computer security. Nevertheless, many of the infected pages have been already cleared of the malicious code.