blog.hugepixels web . internet . design . computer . gadget

20Jun/09Off

What is a Gumblar Attack?

Gumblar appears to be a combination of exploit scripts and malware. The scripts are embedded in .html, .js and .php files using obfuscated Javascript. They load malware content from third party sites without the user's knowledge. It also steals FTP credentials from the victim's computer, which allows it to spread and infect additional sites. Therefore, when someone visits an infected site they get infected and if they have FTP credentials for a website on their machine then those sites will get infected too. This explains the exponential growth of the exploit in such a short space of time.

Further Read:
- http://news.cnet.com/8301-1009_3-10244529-83.html

Share on TwitterShare on LinkedInShare on TumblrSubmit to StumbleUponSave on DeliciousShare via email