30

Stories about: web attack

Clickjacking Worm Hits Facebook A clickjacking worm that forced hundreds of thousands of unsuspecting Facebook users to unknowingly post spam messages on their profiles, rapidly spread through the social networking website over the weekend. The worm used catchy news headlines to lure its victims into the trap.Clickjacking is a Web attack technique ... 31 May 2010 11:14 GMT Thousands of Chinese Gov and Edu Websites Infected Security researchers from Vietnamese security vendor Bach Khoa Internetwork Security (Bkis) have identified a new mass injection attack that so far infected almost 180,000 websites with rogue <script> tags. The majority of affected sites are Chinese and many of them are in the gov.cn or edu.cn domain namesp... 17 December 2009 05:10 GMT Feasible Client-Side CSRF Token Brute Force Attack Revealed An application security researcher has devised a proof-of-concept attack capable of bypassing commonly used cross-site request forgery (CSRF) protections, such as assigning random tokens associated with the session. The complete attack leverages on an older technique of searching the browser's history via CSS. ... 20 July 2009 06:50 GMT