If you're new here, you may want to subscribe via RSS feed or Email. Thank you for visiting!

Title says it all. Virus researchers at Finnish security vendor F-Secure discovered the Netscape.com hack during research work around cross-site scripting vulnerabilities on social networking sites and said the attack was obviously the work of Digg fans. In the cross-site scripting attacks, visitors to Netscape.com encountered JavaScript pop-up alerts with comical pro-Digg messages and, in some cases, were redirecting Netscape.com visitors to Digg.

“Attackers (who are obviously fans of Digg) have used the XSS vulnerability to inject their own JavaScript code snippets into pages on the website, including the homepage,” said a note posted by F-Secure anti-phishing researcher S.G Masood.

Netscape released a statement this afternoon stating that the vulnerability had been patched and that visitors are once again safe browsing the site.

Link: F-Secure

This entry was posted on Thursday, July 27th, 2006 at 1:20 pm and is filed under Daily Dose, The Internet. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.