Mass injection attack hits a million websites

More than a million URLs have been compromised by a cyberattack that's suddenly ramped up in the last 24 hours to become one of the biggest mass-injection attacks ever seen.

The Trojan, dubbed Lizamoon, redirects Web surfers to a fake antivirus website via malicious JavaScript code injected into web pages.

Discovered two days ago, it's escalated rapidly. Around half the victims appear to be located in the US.

A number of iTunes pages appear to be affected, although the way these pages are set up prevents the code from automatically executing on users' computers.

Now, security firm Websense says its detected a number of other injected URLs on top of the original Lizamoon, meaning the attack is even bigger than first thought - there's a full list, here.

Read more -here-

• OpenAI partners with Stack Overflow to make models better at coding
• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages