Interesting vector for browser vulnerability exploit…ebay



incidents.org has received a tip on an ebay item that contained some malicious script…

ISC reader Gareth Attrill pointed us to an eBay auction that has some escaped HTML code that sneaks in a link that tries to get a trojanized .jar (usage.jar) file loaded on anyone who loads the listing. The latest .dat for McAfee immediately detected (and deleted) the code as Exploit-ByteVerify. The lister most likely managed to bypass other protections that otherwise prevents this kind of code from being inserted into item listings. Both eBay and the ISP that is hosting the malware have been notified.


This is an interesting way to use a legit site to sneak something past the casual users. Their warning is to verify any html input that you allow from visitors to your site.

Related Posts

Blog Traffic Exchange Related Posts
  • AT&T rbl block inquiry site First, I guess I should give a primer, what's an RBL? RBL stands for Realtime Black List (or Realtime Block List depending on who you talk to.) The idea is there are machines that either 1) have no business DIRECTLY trying to deliver a mail message to a legitimate mail......
  • Facebook Fan Check Application Virus Just as last week, the facebook fan check application virus rumor is making the rounds again. And also just as last week people searching for information on the facebook fan check virus are running into some of the top search results hosting malware. There were several attack sites up last......
  • A Deeper look at Nyxem First I should raise an alarm of warning on this one, this virus is supposed to overwrite all accessible document files (network shares too) on the 3rd of the month, so February 3rd we may be seeing some problems. Don't wait until then to make sure you have current antivirus......
Blog Traffic Exchange Related Websites
  • Seven Reasons To Avoid Penny Auction Sites This post was written by Marie. Would you like to buy a $200 Target gift card for $2.03? What about a Toshiba Mini 10.1” Netbook PC for only $13.70? Who wouldn't, right? But where do you find such deals? As I write this article, these items are being auctioned......
  • Advertising on Facebook If you are not already making use of Facebook as a method of marketing your business or niche, then you are absolutely missing out on a great opportunity to reach out to hundreds of millions of active users. Today, Facebook has become one of the most popular online social networking......
  • Finding Other Stamp Collectors [/caption]Finding other stamp collectors is essential when you want to trade amongst other collectors. Thanks to the Internet, it is now possible to connect with other collectors very easily without problems. It is also easier to find rare and quality stamps that you wouldn't be able to find with any......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site