Drupal websites hacked using SQL injection flaw
Hackers have attacked hundreds of Drupal websites, installing ransomware that hijacks the website’s main page.
Softpedia reported that the attackers exploited a two-year-old vulnerability in Drupal for the SQL injection attacks.
Drupal website owners said their websites were locked, with the message:
“Website is locked. Please transfer 1.4 BitCoin to address 3M6SQh8Q6d2j1B4JRCe2ESRLHT4vTDbSM9 to unlock content.”
“The attacker’s scanning bot extracts the Drupal site’s version, then uses the CVE-2014-3704 vulnerability to break into the affected websites and change the admin user’s password,” reported Softpedia.
CVE-2014-3704 is an SQL injection vulnerability that affects Drupal 7.x installations prior to version 7.32.
More on security
Massive South African credit card leak
Criminals infect ATMs with malware to steal your card data
Over 100 million LinkedIn accounts compromised
Loading ...