main

ASUStek's Web site hacked, serves up Malware for .ANI flaw

Slimy   on 06 April 2007 - 21:43 · 18 comments & 6576 views

Advertisement (Why?)
The Web site for computer parts manufacturer ASUStek Computer has been hacked and has been serving up attack code that exploits the recently patched .ANI Windows vulnerability. The exploit is hidden in an HTML element on the front page of ASUStek's Taiwanese Web site, which then attempts to download the code from another server. As of Friday afternoon, the server hosting the attack code was not operational, mitigating the risk of this attack, although attackers can always redirect their attacks to a live server. Based in Taipei, ASUStek makes computer accessories like motherboards, video cards, and CD-ROMs. Reliable exploit code that targets this flaw has been circulating for more than a week now. Roger Thompson, CTO with Exploit Prevention Labs, noted that the ASUStek hack shows how easy it is for even trusted Web sites to be compromised: "If a major company like ASUStek can get hacked and be infective, anyone can."

News source: InfoWorld

Post a comment · Send to friend Comments · There are 18 additional comments
(1 reply) #1 tiagosilva29 on 06 Apr 2007 - 21:52
Quote -
"If a major company like ASUStek can get hacked and be infective, anyone can."


Major company, yes. But their websites are among the vilest things that ever set food online.
Slow as **** (if you are luckily enough to actually access a certain page) and annoying as **** with those pesky flashlets!
#1.1 Burned on 09 Apr 2007 - 06:32
When did they "set food online"?
(2 replies) #2 Tantawi on 06 Apr 2007 - 21:58
O.M.G
#2.1 karveira on 07 Apr 2007 - 09:33
Opera
#2.2 +Octol on 08 Apr 2007 - 00:28
Bluegrass
(2 replies) #3 ir0nw0lf on 06 Apr 2007 - 21:59
One would hope that this little boo-boo gets Asus to upgrade their servers... I think the squirrels powering their existing servers are near the death point. Please get faster servers!
#3.1 neuralshock on 06 Apr 2007 - 22:06
Quote - (ir0nw0lf said @ #3)
One would hope that this little boo-boo gets Asus to upgrade their servers... I think the squirrels powering their existing servers are near the death point. Please get faster servers!


And one would hope they make a decent website, too.
#3.2 Justin- on 06 Apr 2007 - 23:11
There website isn't THAT bad. At least let them fix (get new) their servers before they start trying to make a new layout.
(2 replies) #4 Ravensworth on 06 Apr 2007 - 22:01
I can never get their page to load anyway. They must be running Windows for Workgroups 3.11 on a 386.
#4.1 spongaweb on 06 Apr 2007 - 23:13
actually according to netcraft they are running Windows Server 2003 on the Asus.com site but for the other foreign ones it is mixed up.
http://searchdns.netcraft.com/?host=http%3...mp;lookup=Wait..

website was always slow and had worst download speeds

Last edited by spongaweb on 06 Apr 2007 - 23:18
#4.2 toadeater on 06 Apr 2007 - 23:16
Quote - (Ravensworth said @ #4)
I can never get their page to load anyway. They must be running Windows for Workgroups 3.11 on a 386.


Asus needs to work on their customer service in general. It's pretty sad for such a large corporation.
#5 vetmarkjensen on 07 Apr 2007 - 00:16
So much for people who claim they are "safe" because they only browse "safe" sites.

Even ad content on "safe" sites can be tainted.
#6 denzilla on 07 Apr 2007 - 02:26
So as long as you didn't visit the Taiwanese site, you're cool? I used the North American site a couple of days before the patch was released.
#7 invalidbuffalo on 07 Apr 2007 - 06:40
i should update windows someday
#8 Puggsley on 07 Apr 2007 - 06:57
I used their site a few days ago and luckily norton caught it straight away.
(2 replies) #9 invalidbuffalo on 07 Apr 2007 - 08:08
how could I tell if my computer was affected? I was there updating my bios today...
#9.1 dragon2611 on 07 Apr 2007 - 15:45
do you have an up to date antivirus installed, if so it should stop it
#9.2 invalidbuffalo on 07 Apr 2007 - 17:27
Quote - (dragon2611 said @ #9.1)
do you have an up to date antivirus installed, if so it should stop it

I don't use antivirus. I'll get NOD32 on and run a scan...

Update: turns out my pc was updated, and NOD32 didn't catch anything.

Last edited by invalidbuffalo on 08 Apr 2007 - 01:08

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)