Interesting vector for browser vulnerability exploit…ebay



incidents.org has received a tip on an ebay item that contained some malicious script…

ISC reader Gareth Attrill pointed us to an eBay auction that has some escaped HTML code that sneaks in a link that tries to get a trojanized .jar (usage.jar) file loaded on anyone who loads the listing. The latest .dat for McAfee immediately detected (and deleted) the code as Exploit-ByteVerify. The lister most likely managed to bypass other protections that otherwise prevents this kind of code from being inserted into item listings. Both eBay and the ISP that is hosting the malware have been notified.


This is an interesting way to use a legit site to sneak something past the casual users. Their warning is to verify any html input that you allow from visitors to your site.

Related Posts

Blog Traffic Exchange Related Posts
  • Time, value, ROI, Google and this site.... Googlebummed This is a fairly significant "state of this site" type post and well... if you're a usual visitor you might want to read/skim this one. It's been about 15 months or so since the last big redesign of this site and as some long time lurkers may know, the updates......
  • AT&T rbl block inquiry site First, I guess I should give a primer, what's an RBL? RBL stands for Realtime Black List (or Realtime Block List depending on who you talk to.) The idea is there are machines that either 1) have no business DIRECTLY trying to deliver a mail message to a legitimate mail......
  • Multi-OS virus? The multi-OS virus may be a proof of concept, but it could be a sign of bad things to come. Let's face it, there have been viruses that have taken advantage of multiple ways of spreading (email/open network shares/instant messengers...) It would almost make sense that even though it's POC..........
Blog Traffic Exchange Related Websites
  • Guide To EBay Local Pick Up Items Purchase And Delivery eBay is without doubt the most widely known website to look for second hand items However, while many items such as mobile phones, cameras, clothes can be shipped easily through courier companies or postal services,relatively heavy items such as furniture and cars cannot. Therefore, many eBay sellers select the......
  • Stimulus Watch: Check This Out! [/caption] I've asked myself this question many, many times, but I never could come up with a concrete answer.  Yesterday, however, I was surfing the web when I came across a very interesting website: Stimuluswatch.org.  This website has a detailed description of what exactly our money is going to, and......
  • Is It Better When You "Win" It? Ebay has been running an interesting campaign over the last couple of weeks. You may have seen a series of "Shop Victoriously" commercials. These show people in competition for some kind of trinket or collector's item, such as a classic lunch box or an urn. By the end of the......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site