New 'Drive By' Attack Is Remote

They're calling it "drive by pharming." But unlike war driving, an attacker doesn't have to be anywhere in the vicinity to stage this newly discovered type of attack, which can give him/her access to personal data such as your bank account.

The invasion is a simple one. The attacker uses a broadband router vendor's default passwords -- some of which can be found with a Net search -- to take control of such routers, which are found all over small businesses, homes, and WiFi hotspots. But first, the victim must visit a Website infected with malicious JavaScript code, which uses the dreaded Cross Site Request Forgery (CSRF) technique in the browser to log into your local broadband router and change its settings to control where you go on the Web.

Millions of users worldwide could be vulnerable to this attack, says Zulfikar Ramzan, senior principal researcher for Symantec Security Response, who recently co-developed the proof-of-concept for this attack. Dark Reading - Desktop Security - New 'Drive-By' Attack Is Remote - Security News Analysis

Linked by shanmuga Saturday, 17th February 2007 9:45PM