Italian Job: The launch of a new attack

The 'Italian Job' attack was the first large scale use of a Web-based attack, and it was duplicated only a few days later.

Saturday, June 16, 2007 was a quiet day, but all over the world of computer virus detection and research, people were hard at work, fighting what well may be the herald of a whole new era in malicious criminal behaviour.

A program called MPACK was involved, but only as the framework of the delivery system. The MPACK kit was used to corrupt web pages and web servers in such a way that they could be used to deliver a Trojan downloader to any unsuspecting visitor.

Just visiting such a corrupted site was enough to infect the user. And once infected, the users computer was pwned. Perhaps the oddest thing about this attack, which we called The Italian Job was that there was really nothing new about it. It used several off the shelf malware components, some of them months old.

You must be a registered member to access this content.
Please Sign in below or Register now.
NOTE: This Feature is more than 7 days old.
Please login to view the rest of this article

Registered users may log in here.

Login or Register now and get unlimited access.


Why sign up?
  • Unlimited access to SC Magazine content as well as access to to our global resources from SC Magazine US and UK editions.
  • Full use of over 11,000 articles database covering breaking news, video interviews, case studies, research, product reviews and exclusive features with fast and intuitive filtering of results.
  • Personalised "Recommended for you" filters to ensure you have the most relevant content at your finger tips.
  • Daily security bulletin direct to your inbox covering the latest security news from Australia/NZ and around the world.

Register now, its free! We'll never sell your details to third parties and it helps SC Magazine to keep serving you quality stories.
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read