Bank of India site hacked

August 31st, 2007 Noor Posted in Hacking Attacks |

The Bank of India Web site was hacked sometime Wednesday night

(U.S. time) and seeded with a wide, wild array of malware that infected any users running unpatched browsers, security researchers said today.

Although the bank’s site had been scoured of all malware by Friday morning, it’s currently offline. “This site is under temporary maintenance and will be available after 09:00 IST on 1.09.07,” a prominent message currently reads.

Researchers at Sunbelt Software Inc. first posted details of the hack yesterday afternoon after finding rogue code embedded in the site’s HTML. That code, actually an IFRAME exploit, silently redirected users

to a hacker server, which pushed 22 different pieces of malware onto vulnerable PCs. By Sunbelt’s tally, the malware included one worm, three rootkits, five Trojan downloaders, and several password stealers. “The biggest issue is the sheer volume of malware we’ve had to analyze,” said Alex Eckelberry, Sunbelt’s CEO, in a blog posting yesterday