A Microsoft website dedicated to online privacy was recently hacked to host content promoting online casinos.
The Microsoft site Digital Constitution was running an older version of WordPress when the spammy links were discovered, according to ZDNet, which first reported the compromise. Even after the links were removed from the front page in the hours following the ZDNet post, a variety of other pages continued link to the gambling sites.
It's not clear how long the site had been infected, if the attack included malicious links that attacked visitor computers, or if other Microsoft websites were similarly hacked. It's not unusual for hack-by-numbers exploit kits to automatically inject malicious links into vulnerable pages that when viewed by vulnerable computers, perform driveby download attacks. Ars put these questions to a spokesman with Microsoft's outside PR firm, but he declined to comment, other than to say "it's fixed."
Read on Ars Technica | Comments