Nikjju Mass SQL injection campaign (180k+ sites compromised)

Posted by davedd on Tuesday April 17, 2012 @11:17AM
from the blog.sucuri.net dept.

http://blog.sucuri.net/2012/04/nikjju-mass-injection-campaign-150k-sites-compromised.html

( 3 comments | 7 points | on HN )

Re:Nikjju Mass SQL injection campaign (180k+ sites compromised) by rollypolly on Tuesday April 17, 2012 @12:10PM (#3853284)

Does using Noscript prevents the spreading of this?

[ Parent | on HN ]

Re:Nikjju Mass SQL injection campaign (180k+ sites compromised) by davedd on Tuesday April 17, 2012 @12:13PM (#3853295)

It prevents a user visiting those sites from getting compromised.

However, the spread if this is via SQL injection, so as long as those sites are insecure, it will keep going..

[ Parent | on HN ]

Re:Nikjju Mass SQL injection campaign (180k+ sites compromised) by wglb on Tuesday April 17, 2012 @03:28PM (#3854536)

The first paragraph of the article notes that this is spread by SQL injection, which is something that happens on the server. Noscript works on the browser.

[ Parent | on HN ]