A mass SQL injection attack has infected hundreds of thousands — as many as 500,000, according to some accounts — of normally trusted Web sites, including those of the United Nations and several governments. The attack, which mimics another recent malware episode, was launched with the apparent goal of stealing visitors’ user information. While there is nothing new about that, there are some differences in this attack that are worrying the Internet security community.
Mass SQL Attack a Wake-Up Call for Developers
Posted by: Erika Morphy April 28, 2008 02:03 PMA mass SQL injection attack has infected hundreds of thousands — as many as 500,000, according to some accounts — of normally trusted Web sites, including those of the United Nations and several governments. The attack, which mimics another recent malware episode, was launched with the apparent goal of stealing visitors’ user information. While there is nothing new about that, there are some differences in this attack that are worrying the Internet security community.