A malicious iframe exploit is currently being loaded by thousands of sites all over the Internet according the Scansafe blog. These sites are not any kind of criminal sites at all, they are completely legitimate sites which also make the visitors easy targets since they are not expected to get backdoor trojans, password stealers, and downloaders installed against their will and knowledge 🙂 . Some examples of infected web sites are www.feedzilla.com, latindiscover.com, howellcarecenter.com, sweetgrassvillagealf.com, www.foodsresourcebank.org, and morningsideassistedliving.com.
The infected sites got a small piece of code inserted in the normal HTML code which is loading a Javascript. Once the Javascript has been loaded it will in turn load additional exploits and malware from up to seven different malware domains!!!
So how do you protect yourself from this kind of evil software? The best thing is to have an up-to-date antivirus software installed, but you should also make sure that all other softwares you’re using like web browsers, Adobe reader, etc are updated with the latest versions. It’s of course also important to install all the latest Windows updates from Microsoft, so If you haven’t done so yet you should turn on automatic updates where possible.
If you have a blog or web site you should of course check your site for weird code you haven’t uploaded yourself. In this case you should search for the following code string:
“script src=http://a0v.org/x.js”
At XavierSeek.com you can search for this code string and if you also fill in your domain name in the search field together with the code string you can easily see if your site is infected.
Click on the image to start searching your own sites, just replace sampleaddress.com with your actual domain name. You owe all your visitors and clients to keep your site malware free because they trust you 😉
