
On July 26, 2006, Netscape.com was the victim of an ongoing online spat it has with rival Digg.com. Fans of the later online news service have taken critical measures in order to shift the balance in favor of Digg.com and have hacked Netscapes' Website. The attack was performed via Cross Site Scripting (XSS) vulnerability. This allowed the attackers to place humorous messages of Netscape.com reading: "This site sucks" or "Hi to all you Diggers out there" while redirecting traffic to Digg.com. The hackers inserted JavaScript code snippets into all the pages of Netscape, including the homepage. The
possibility that the attack was used to inject malicious code has not been confirmed.
The Netscape.com hack was discovered by researchers at F-Secure, but the security company has not made public any updates concerning the matter and the identities of the hackers remain unknown. "Attackers have used the XSS vulnerability to inject their own JavaScript code snippets into pages on the website, including the homepage," said a note posted by F-Secure anti-phishing researcher S.G Masood. "Fortunately no one has tried to inject malicious code, yet."
America Online representatives have explained that the exploit was possible because of improper filtering of story submission from users. As a result some of the submissions containing the cross-site scripting exploit managed to get passed Netscape.com defenses allowing for the incident to unfold. Critics of Netscape have accused the social news site of copying Digg.com, since it has launched its services in June 2006.