Amnesty UK website hacked to serve lethal Gh0st RAT Trojan

[InfoSec News <alerts () infosecnews org>]

http://news.techworld.com/security/3357186/amnesty-uk-website-hacked-serve-lethal-gh0st-rat-trojan/

By John E Dunn
Techworld
11 May 2012

Amnesty International’s UK website was hacked to host the dangerous 
Gh0st RAT Trojan for two days this week, security firm Websense has 
revealed.

Attacking browsers unpatched against the common CVE-2012-0507 Java 
vulnerability (also used by the Mac Flashback Trojan), between 8 and 9 
May visitors would have been at risk of downloading a Windows executable 
hiding behind a valid VeriSign-issued digital certificate.

Anyone clicking Ok to this install trick would have become infected with 
Gh0st RAT, a potent backdoor Trojan used to cull passwords and files and 
just about anything else the attacker wants to take from the infected 
system.

The injected web code was removed after Websense alerted Amnesty to the 
issue.

[...]

_______________________________________________
LayerOne Security Conference
May 26-27, Clarion Hotel, Anaheim, CA
http://www.layerone.org