Scob code still widespread, says security expert

More than 100 web servers are still distributing the "Scob" malicious code, first identified two weeks ago as code used in a widespread attack to plant Trojan horse programs on vulnerable computers. The attack used compromised Microsoft Internet Information Services (IIS) web servers to distribute the Trojan horse programs. Enterprise security software maker Websense discovered 114 websites distributing variations of a malicious JavaScript program known as "Scob", or "Download.Ject".

Whereas the attack initially targeted only web servers running IIS Version 5, the majority of infected sites now run IIS Version 6, after administrators upgraded the systems, unaware their servers were already infected, said Dan Hubbard, director of security and technology research at Websense.

Read Full Story