Technology Forum

Tennis sites hit by drive-by download attacks....Two high-profile tennis websites are among scores of victims of a new wave of SQL injection attacks. The website of game regulators ITF and ATP, the professional players tour, were hit by automated attacks in the run-up to this week's Wimbledon championship.The ITF (International Tennis Foundation) website has since been cleaned up but the ATP website remains dirty, according to Fraser Howard, a security researcher at Sophos who's tracking the attacks. Howard explained that hackers used search engines and automated tools to hunt for vulnerable sites. The timing of the infection of the tennis websites is therefore just a coincidence.SQL injection attacks are commonly used by hackers to booby-trap legitimate websites with exploits designed to load malware onto the PCs of vulnerable machines. This type of attack, called a drive-by download, is becoming increasingly common.Full article here -> http://www.theregister.co.uk/2008/06...ction_attacks/