Bank Of India Site Co-Opted By Malware

WebProNews Staff — Thu, 30 Aug 2007 23:47:16 +0000

Although Alex Eckelberry of Sunbelt Software believes fully patched IE and Firefox systems should be safe from the corrupted Bank of India website, it’s probably best to avoid the site until a massive malware problem has been corrected.

Just as it happened with the Dolphin Stadium website before the most recent Super Bowl, the Bank of India website has suffered an attack that dumps malware onto a visitor’s system. A code injection attack appears to be the vector used.

Eckelberry said in a phone interview with WebProNews that Sunbelt Software has found more than 20 pieces of malware being delivered through an IFRAME on the bank’s site.

Sunbelt picked up on the problem around 2 pm ET today. Efforts to contact the Bank of India have been unsuccessful, Eckelberry said, likely due to the time difference.

According to Netcraft, the Bank of India website runs on the Windows operating system, using IIS as the web server. The Dolphin Stadium also runs on Windows, as it did when it was attacked earlier this year.

WebProNews » Bank of India

Bank Of India Site Co-Opted By Malware