Songlyrics.com suffers security breach
Google Instant results linked to malware infections
TechLife | 17 Sep 2010 :
Security firm Websense Security Labs has issued a statement saying its ThreatSeeker Network has detected a a breach at the popular site Songlyrics.com. The site, which gets approximately 200,00 daily page views and 2,000,000 unique visitors, is alleged to have been compromised by obfuscated malicious code.
Once a user accesses the main page of the song lyrics site, malicious code is injected which leads a user to an exploit site loaded with the Crimepack exploit kit. Only 39.5% of antivirus engines are currently recognizing this exploit. Unfortunately - those computers exposed and infected becomes another zombie-bot in the wild, with hardly anything the user can do to prevent this from occurring.
Carl Leonard, senior manager at Websense Security Labs, said: "We are seeing the bad guys more frequently compromise popular sites in an effort to infect and exploit the most users, as in this most recent case with Songlyrics.com, a site that gets millions of unique visitors.
"It is unfortunate that in this case, Google Instant results are also helping to steer unaware users to this malicious content."
Users are advised protect themselves by keeping their anti-virus software up to date.