UsAid indeed

Hi folks,

The usaid.gov site for Azerbaijan is hacked and infective. _DO NOT GO TO THEIR SITE_. We made a vid to show what happens, because that's much safer than visiting, and it is viewable here ... http://www.youtube.com/watch?v=gjYhxsDeShQ&feature=channel_page

Screen shots are a little bit blurry this time ... sorry about that... we've changed our screen resolution for captures and it didn't quite work out, but you can still get the idea.

Cheers

Roger

   

ps to be notified of updates to this blog, and for quick points that aren't worth a full blog post, please follow me on Twitter

Comments

[Roger]

John Holmes asked if the usaid site was now clean, and the answer is, yes, it's now clean.

:-)

[John Holmes]

Hey Roger,

Using AVG linkscanner lite, exploit definition 08 MAR 09 and Exploit Site 28 FEB 09, googling for "Azerbaijan USAID" comes up with that site as the first hit on google, but linkscanner lite displays a green check by it. If I right click on it and "scan with linkscanner", it still shows no exploit. Is the site clean now? I am running ForceFeild, Virtualization on, with NoScript active on FF 3.0.7, on a Secunia-scanned fully-patched system, so I don't think many exploits would be effective if I did visit the site, but could you confirm on the cleanliness, and also if not clean, why linkscanner isnt picking this up?

[Fyre Vortex]

Lol. Nice. I agree with John-Should have had some demonstration of AVG while in the video, but still, the video's great. ;)

Thanks for the warning.

[Roger]

Hi John,

Thanks for the question, and sorry for the slow response. Yeah, LinkScanner detects and blocks it just fine. I dunno what the exploit was... I didn't bother checking... most are big exploit packs at the moment where they just chuck a whole lot of stuff and hope something sticks.

Cheers

Roger

[John A Thomson]

Hey Roger,

Good video... but... you forget to tell us the exploit it was using and of being properly patched would make things a bit safer. Your marketing people will be jumping about that you didn't mention or demo how Linkscanner (Safe Surf) would protect you from it! Or does it?

Take care.

Regards

John