Re: Urgent: Deciphering binary code executed against the database

On May 13, 4:58=A0am, Pumba <takvi...@[EMAIL PROTECTED]
> wrote:
> On 13 Mai, 03:25, Eric <eisa...@[EMAIL PROTECTED]
> wrote:
>
> > Based on what I've been hearing about in the news, I'm guessing it was
> > a SQL Injection attack. =A0But I too would like to know.
>
> Where did you read about this?
>
> Tor

http://isc.sans.org/diary.html?storyid=3D4331

That went to a different website, but with the same script to insert
it.  Also:

http://www.us-cert.gov/current/index.html#compromised_websites_hosting_malic=
ious_javascript

Because this attack is so widespread, us-cert.gov is recommending
people disable JavaScript on their browser completely, and follow
these steps:

http://www.us-cert.gov/reading_room/securing_browser/

Some articles claim that disabling JavaScript is not enough...that
some variants of the attack can exploit holes in HTML without even
JavaScript.  That sounds a bit far-out to me, but that's what some
experts are saying.