MSN Site Hacking Went Undetected for Days

[David Farber <dave () farber net>]

Begin forwarded message:

From: Monty Solomon <monty () roscom com>
Date: June 4, 2005 2:00:00 PM EDT
To: undisclosed-recipient:;
Subject: MSN Site Hacking Went Undetected for Days



      MSN Site Hacking Went Undetected for Days
      - Jun 3, 2005 09:06 PM (AP Online)

By TED BRIDIS AP Technology Writer


WASHINGTON (AP) -- Password-stealing software planted by hackers was
active on Microsoft's popular MSN Web site in South Korea for days
before the world's largest software company learned about the
break-in and removed the computer code.


Police investigators and Microsoft specialists are continuing to
search for clues to the culprits behind this week's high-profile
computer break-in. More details emerged Friday about the hacking,
which targeted subscribers of an online game called "Lineage" that is
popular in Asia.


Microsoft Corp. said it had cleaned the Web site, www.msn.co.kr, and
removed the software code that had been planted on its news page. It
said another company that operates the MSN Korea site apparently
failed to apply necessary software patches, leaving its server
computers vulnerable.


Security researchers at San Diego-based Websense Inc. discovered the
break-in late Sunday during routine scans it makes against more than
250 million Web sites each week looking for sources of viruses and
other infections.


A previous inspection by Websense of the MSN Korea site the evening
of May 27 did not detect the dangerous software.

...

      - http://finance.lycos.com/home/news/story.asp?story=49637472



-------------------------------------
You are subscribed as lists-ip () insecure org
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/