Thousands of Web Sites Hit With New Twist on Old SQL Injection Hack

Somebody somewhere has found a new twist on an old method for attacking Web sites. The result is that hundreds of thousands– and perhaps more than a million–Web sites are pointing innocent visitors toward shady sites that offer “security software” for their “infected” PCs. The lesson here? Don’t click on any strange pop-up messages.

Voices

Websense Explores Sale of Company

Web security software company Websense Inc. is exploring a sale with the aid of investment bank Qatalyst Partners, people familiar with the matter said. San Diego-based Websense has a market capitalization of $826 million and could fetch around $1 billion in a sale, these people said.

Voices

New Software Aims to Keep Facebook Safer

As social-media sites like Facebook and Twitter have expanded to include more of the online population, spammers and hackers have come along for the ride. Even the FCC chairman has seen his Facebook page taken over by a malicious program that sent spam to his friends.

Voices

Bit.ly Inks Malware-Spotting Deals

As popular as link-shortening services are, security experts have been warning users that they put themselves at risk of malware infection by using them, since a suspicious-looking Web address just becomes another Bit.ly or TinyURL link once it’s shortened.

Voices

Beware the Michael Jackson Spam

It didn’t take long for fraudsters to exploit Michael Jackson’s death, as online security firms began reporting email scams using his name to attract victims. One message contains links supposedly of unpublished photos and a YouTube video of the singer, but the link prompts recipients to download a file that, when opened, opens a legitimate Web page while downloading and installing malware, according to San Diego-based security provider Websense.

Voices

Hackers Target Basketball Fans With March Madness Malware

Basketball fans, beware. Hackers are taking advantage of bracket-related Web surfing and initiating some madness of their own, with tactics as sneaky as spreading malicious software through March Madness blog posts. Online security company Websense discovered two March Madness-related malware scams earlier this week, one in the form of URLs posted in blog comments that took users to a phony antivirus scanning site, and another as a search-engine-optimization scam that infected basketball-related terms and pushed them to the top in Google.