Submission + - IPowerWeb hosting service compromised by hackers?
quixote9 writes: "This come from Ethan Zuckerman's blog, My Heart's in Accra:
As he says, it seems like the sort of story that should be getting more coverage from the tech community."Stop Badware announced that there are 10,834 sites hosted by IPowerWeb in the Stop Badware index — this index is composed of sites that Google and other partners have identified as hosting code that could damage a visitor's machine. More than one in five of the sites Stop Badware analyzed was hosted by IPowerWeb. That statistic strongly suggests that IPowerWeb has been systematically compromised, allowing hackers to inject this hostile code, possibly through a bug in cpanel (which IPowerWeb runs on at least some of their servers.)...
A major webhosting provider is vulnerable to attacks on hosted pages. Over 10,000 pages have been affected, and some now contain a Javascript designed to load a Windows trojan horse onto visitors' machines. That trojan horse may be sending data (including passwords entered into your browser!) to a cabal of Russian hackers.