Malware 'has infected major Government websites'
Wednesday, 23 July 2008
Key Government websites have been infected by cyber-criminals aiming to steal browsers' personal details, it was reported today.
More than a thousand Government and consumer sites are said to have been hit, including some run by the NHS and a local council.
The Times Online says the hackers are Eastern European and that security experts estimate at least two million computers worldwide have been affected.
At the heart of the claims is the asprox 'toolkit' that installs malware on vulnerable websites and tries to commandeer them, says The Independent's Cyberlinic columnist, Rhodri Marsden. He said: "Infected websites then install malware on the computers of any visitors to the site, INCLUDING another copy of Asprox. Which then searches for more websites to infect. Vicious.
"The big story, really, is that the way Asprox gets installed - i.e. by visiting a website that has been hacked - has now replaced nasty email attachments as the biggest security danger. And it's not just porn sites or other dubious online destinations that are carrying them. It could be any website that happens to be vulnerable. And many are."
Times Online reports that Asprox hit the Norfolk NHS website last week and that Hackney Council’s website was one of 12 local council sites compromised.
Nigella Lawson’s website was hit last week although her spokesman said that the virus was dealt with “instantly” and that nobody was infected.

This reinforces the essential advice to keep your browser up to date with security fixes. You cannot trust any website to protect your privacy or security. That obligation lies with you alone. Users of Internet Explorer 6 be warned.
Posted by Lawrene | 23.07.08, 19:32 GMT
And all because the minister loved Bill Gates.
Posted by mac-happy | 23.07.08, 19:26 GMT
Well, Asprox does sound like a suppository...
HMG seems to have the technical ability of AOL subscribers. I recently joined NHS Direct, and in due course received a welcome email which was CCd to about a hundred people instead of being BCCd. When I complained there were apologies all round, and assurances that this would not recur, but I'd sooner trust Mugabe than our band of Merrie Incompetents.
Posted by John Annis | 23.07.08, 18:02 GMT
It's good to know we can trust the government to implement IT projects well. Can't wait for my all my data to be on one centralised database for the ID card system...
Posted by Tolan Blundell | 23.07.08, 15:50 GMT