Hacked Web site damaged PCs in Japan

Malicious JavaScript downloaded from a hacked auction Web site caused Japanese Internet users serious problems over the weekend, the Japanese government’s Information-technology Promotion Agency (IPA) reported Tuesday.

The auction site Price Loto, run by Mediagate Corp., was hacked. The attack started on Saturday morning and continued until Monday afternoon when Mediagate temporarily closed the site, according to Takashi Endo, the president of the company. The site is now back in service.

Users who visited the Price Loto site using Microsoft Corp.’s Internet Explorer 4.x and 5.x, automatically downloaded malicious JavaScript that was programmed to alter the software configuration of their PCs. Users of affected PCs experienced difficulties opening up new applications, changing set-ups and closing down the operating system, the IPA report said.

After shutting down the machine by force and restarting it, a message would appear in English, saying “If you have any trouble please email:[email protected]. note:not for japanese&dog&pig,” and users would either lose all of the icons on the desktop, be unable to open any file, or be unable to shut down Windows again.

The auction site has 40,000 page views and 10,000 unique users per day, Endo said.

The IPA has received damage reports from several dozen users within the last three days, which it considers to be a large amount as it normally receives about 300 reports per month, said Shigeru Nakamura, a spokesman for the agency.

The agency is warning about the possibility of similar attacks on other Web sites and describing measures to prevent such attacks on its Web site. The attack can be prevented by blocking the browser’s security hole, or by disabling JavaScript, the IPA said.

The IPA can be contacted at

http://www.ipa.go.jp/

.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now