Technology content trusted in North America and globally since 1999
8,227 Reviews & Articles | 62,336 News Posts

AskMen website hacked twice in the past month, sending malicious code

The AskMen website was hacked for a second time in the past month, infecting users with a Nuclear Pack exploit kit that is flagged as "Trojan.Kelihos"
By: Michael Hatamoto | Hacking & Security News | Posted: Jul 21, 2014 11:26 pm

For the second time in the past month, was compromised, with malicious code injected on the company's server sending out attacks. AskMen is reportedly looking into the security issue after being contacted by security software company Malwarebytes.




In the previous attack, visitors were being targeted by malicious code courtesy of the Nuclear Pack exploit kit, Websense researchers discovered. The attack started by redirecting users to another website, and then a Java exploit (CVE-2013-2465) and Adobe PDF exploit would be installed.


The second attack discovered by Malwarebytes runs using the same idea - a JavaScript iframe is created to redirect users to a malicious website. The new website serves as a landing page for the same Nuclear Pack exploit kit, with the payload dropped and executed on unsuspecting users. The Malwarebytes Anti-Malware software flags the software as "Trojan.Kelihos," the company said.


Related Tags

Got an opinion on this news? Post a comment below!