osCommerce Vulnerability Exploited to Distribute Scareware

Scareware distributors are hijacking vulnerable osCommerce websites in order to launch their BHSEO campaigns. The attacks leverage a publicly disclosed vulnerability and drop several rogue scripts on the compromised servers. The vulnerability is known since at least August 31, 2009, when a w... [ read more >> ]