Discord Server Red Security Twitter Donation to Red Security Red Security Youtube Channel Red Security Tumblr Profile
Windscribe
Login or Register to Hide ads and Accessing all features on the forum
Thread Rating:
  • 1 Vote(s) - 1 Average
  • 1
  • 2
  • 3
  • 4
  • 5
News Credit-Card Skimmer Has Unlikely Target: Microsoft ASP.NET Sites
#1
Big Grin 
In The Name OF Allah
Al-Salam Alekum

[Image: POS-malware.jpeg]

Good Big Grin 

Quote:A campaign discovered by Malwarebytes Labs in mid-April has lifted credentials from a number of e-commerce portals.


Researchers have identified a credit-card skimming campaign that’s been active since mid-April that has a rather specific and unusual target: ASP.NET-based websites running on Microsoft Internet Information Services (IIS) servers.

New research from Malwarebytes Labs recently uncovered the campaign, which already has compromised at least a dozen websites that range from sports organizations, health and community associations, and a credit union — all via a malicious code injected into existing JavaScript libraries on each of the sites.

The campaign seems to be exploiting an older version of ASP.NET, version 4.0.30319, which is no longer officially supported and contains multiple vulnerabilities, according to the report by Malwarebytes director of threat research Jerome Segura.



Wa Salam Alekum
Rs
* Thankful to Allah *
Kurdy
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Star News Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution - CXSecu News 0 73 09-18-2020, 08:12 AM
Last Post: News
Star News Magento Sites Vulnerable to RCE Stemming From Magmi Plugin Flaws News 0 119 09-02-2020, 02:17 PM
Last Post: News
Star News Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform News 0 138 08-26-2020, 03:41 AM
Last Post: News
Star News Microsoft Edge Now Alerts Users Of Breached Passwords Mr.Kurd 0 391 04-03-2020, 08:09 AM
Last Post: Mr.Kurd
Rainbow News Vulnerability In WPvivid Backup Plugin Could Expose Files Of WordPress Sites Mr.Kurd 0 324 04-01-2020, 11:11 AM
Last Post: Mr.Kurd
Rainbow News Microsoft Alerts Users Of Zero-Day RCE Vulnerability In Windows 7 Under Active Exploi Mr.Kurd 0 397 03-26-2020, 09:03 AM
Last Post: Mr.Kurd
Exclamation News Hackers Exploiting 2 Unpatched Windows 0-Day Vulnerabilities in Wide – Microsoft Warn Mr.Kurd 0 654 03-24-2020, 07:56 AM
Last Post: Mr.Kurd
Thumbs Up News Microsoft pauses Edge releases amid coronavirus outbreak Mr.Kurd 0 341 03-22-2020, 08:20 AM
Last Post: Mr.Kurd
Sad News Bill Gates leaves Microsoft board of directors, signaling the end of an era Mr.Kurd 0 334 03-14-2020, 08:37 AM
Last Post: Mr.Kurd
Shocked News Unpatched Wormable Windows SMBv3 RCE Zero-day Flaw Leaked in Microsoft Security Updat Mr.Kurd 0 425 03-12-2020, 09:39 AM
Last Post: Mr.Kurd



Users browsing this thread: 1 Guest(s)