Θύματα μόλυνσης από malware 27.000 PCs κάθε ώρα από διαφήμιση του Yahoo ad network

[purpleaura]

http://www.informationweek.com/secur...d/d-id/1113325

Enjoy.

[nnn]

Και όπως φαίνεται το πρόβλημα ήταν/είναι σοβαρότερο

Yahoo has provided more information on an ad-related malware attack first reported a week ago that may have affected more than 2 million PCs and put Yahoo users' personal data in jeopardy. The company said some people outside Europe may, in fact, have been hit and that the attacks started four days earlier than previously thought.

In a post made to its Yahoo Help site on Friday, the company said that "while the bulk of those exposed to the malicious advertisements were on European sites, a small fraction of users outside of this region may have been impacted as well." Netherlands-based security company FoxIT had previously said that the UK, France, and Romania were the countries hardest hit by the attack.

Yahoo also said Friday that users of Yahoo services may have been affected between December 27 to January 3. Initially, the company said the attacks had occurred on January 3. It later said they'd occurred between December 31 and January 3.

Before Yahoo addressed the issue, visitors to Yahoo Web sites and users of services such as Yahoo Mail and Yahoo IM may have been served with malware via the Yahoo ad network. Users visiting pages or services with the malicious ads were redirected to sites armed with code that exploits vulnerabilities in Java and installs a variety of different malware.

[sonic]

A ρε java τι τους κάνεις!

[FuS]

Το χειρότερο δεν είναι η java αλλά και καλά τα "java" exe files που κυκλοφορούν στο net και μόνο java δεν είναι καθώς και ότι πολλοί δεν κάνουν update (δεν γνωρίζουν καν ότι χρειάζεται) ή -το χειρότερο- έχουν βάλει κάποιο μολυσμένο exe με ενεργοποιημένο το autoupdate..
Όλα τα παραπάνω είναι τραγικά.