Watch Out for Gumblar
As some of the controversy grows around the current Gumblar outbreak, I thought it might be a good idea to go over a few facts that are known, thanks to the reporting of others. I have bundled all these facts onto a forum thread for all to enjoy over at Lunarforums.com. For those of you who may not have heard of Gumblar yet, the best way to describe it is as a drive-by-download exploit. Once a user views an infected file, the code then – well, let me let the US-CERT describe it to you:
Reports indicate that these website infections occur primarily through stolen FTP credentials but may also be compromised through poor configuration settings, vulnerable web applications, etc.
Not a fun for the infected. Once it gets access to your information, it then spreads itself to others. This is something all webmaster around the Web (hosted at Lunarpages or not) should be aware of. So keep an eye on this thread, and if there is anymore news to report on the issue, we will be happy to do so.
