Malicious code infects Chinese security site

The Web site of one of China's Internet security organizations has been laced with malicious code, security observers said Wednesday.

The Web site of one of China's Internet security organizations has been laced with malicious code.

At least three pages on the Chinese Internet Security Response Team's (CISRT) Web site are rigged with a malicious "iframe," a hidden window on a Web page that can allow code such as JavaScript to run on a visitor's PC, according to Trend Micro's malware blog.

CISRT said the attack takes advantage of vulnerabilities associated with an ActiveX control in the BaoFeng Storm multimedia player. The iframe loads scripts that download more malicious code to a victim's machine, Trend Micro said. One of the downloaders is named "sms.exe."

CISRT apologized for the problems on its blog. "We are very sorry that when sometimes visiting our ... pages, malicious codes are inserted," it said.

How the code appears on CISRT's Web site was unclear. CISRT said it may be an Address Resolution Protocol attack, where data sent from a server to a PC can be manipulated or tainted.

Curiously, the attack appears to affect visitors to the site only intermittently, according to the security company Sunnet Beskerming Pty. Ltd.

"This is actually quite an interesting method that will extend the useful life of a hack by making it harder to isolate and investigate," the company said in its blog. "With intermittent attacks on visitors, it also means that investigators need to look at all of the intermediate connections between site visitors and the Web site."

China has been accused by the West of state-sponsored hacking, although government officials have denied it and said they also have been under attack. Security analysts have warned of China's highly-skilled hacking community.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Cool Tech

Breitling Superocean Heritage Chronographe 44

Learn more >

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?