Monday, November 24, 2008

Ministery of Defence an Attack Site?


Over at the Bangkok Pundit, there was some question over Thai ISPs censoring Google searches.

Another curiosity of note is the Thai Ministry of Defense web site which apparently tries to install malicious software on your computer.

Even more interesting is what Google claims is happening. According to Google:

What is the current listing status for mod.go.th?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 16 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 178 pages we tested on the site over the past 90 days, 20 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2008-11-20, and the last time suspicious content was found on this site was on 2008-11-19.

Malicious software includes 21 trojan(s), 11 exploit(s), 6 scripting exploit(s). Successful infection resulted in an average of 6 new processes on the target machine.

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, mod.go.th appeared to function as an intermediary for the infection of 1 site(s) including sanook.com.

To read more about this site click here.

Or try your luck and click on this link for the Thai Ministry of Defense.

1 comment:

  1. It's a bit unusual that a high-profile website like the defense ministry is affected, but MANY Thai websites get hacked in such a way, especially those of the municipalities or TAO which hardly ever have a competent webadmin who updates software with known security problems before the bad guys use them.

    ReplyDelete

Agree or disagree? Please comment