LizaMoon attack infects millions of websites

By Stacy Cowley, tech editor


NEW YORK (CNNMoney) -- Have you heard the scary news about 'LizaMoon,' a malicious code attack that has already infected more than a million websites?

Don't panic. This particular bit of hacker mischief is setting off alarms among online security watchdogs for its speed and scope, but built-in software safeguards mean few actual users will end up suffering.

The exploit drew headlines because it's affecting a surprisingly large number of websites -- nearly 4 million so far -- and because some of those sites feed into Apple's iTunes platform. Websense, the security software vendor that first broke the news about LizaMoon in its blog, played up the iTunes connection in its first warning about the attack.

But Apple (AAPL, Fortune 500) has iTunes designed to automatically neutralize this kind of threat. That means there's zero risk of an iTunes user's computer actually getting infected by this bit of malware. Websense acknowledged that in its latest LizaMoon update.

"Every time there's a mass-injection like this, and there really hasn't been anything this big before, we try to identify larger systems and sites that have been affected," the company wrote in its blog. "There are few systems out there bigger than iTunes, so when we saw that content on itunes.apple.com contained the injected link we wanted to make people aware of that, even if the script didn't work."

LizaMoon is what's called a SQL code injection attack, where a Web application vulnerability is exploited to inject malicious code into affected websites. If a Web surfer visits an affected site, they'll be redirected to a rogue website that tries to install a "scareware" file. The file generates messages warning the user that their computer is infected with viruses, and offers to sell them antivirus software in defense. Most actual, legitimate antivirus programs will detect and eliminate the malicious file.

And most websites have protections in place to prevent them from getting infected in the first place. While LizaMoon has infested million of websites, security experts say it's a run-of-the-mill threat that is mostly hitting obscure, low-traffic sites.

"Defense against your sites getting infected is the standard things we ought to be doing anyway," the SANS Internet Storm Center, a security monitoring site, wrote in its LizaMoon analysisTo top of page

Frontline troops push for solar energy
The U.S. Marines are testing renewable energy technologies like solar to reduce costs and casualties associated with fossil fuels. Play
25 Best Places to find rich singles
Looking for Mr. or Ms. Moneybags? Hunt down the perfect mate in these wealthy cities, which are brimming with unattached professionals. More
Fun festivals: Twins to mustard to pirates!
You'll see double in Twinsburg, Ohio, and Ketchup lovers should beware in Middleton, WI. Here's some of the best and strangest town festivals. Play
Index Last Change % Change
Dow 16,805.41 127.51 0.76%
Nasdaq 4,483.72 30.93 0.69%
S&P 500 1,964.58 13.76 0.71%
Treasuries 2.27 -0.00 -0.09%
Data as of 5:21pm ET
Company Price Change % Change
Ford Motor Co 13.78 -0.62 -4.31%
Microsoft Corp 46.13 1.11 2.47%
Apple Inc 105.22 0.39 0.37%
Bank of America Corp... 16.72 0.12 0.72%
Yahoo! Inc 43.50 0.90 2.11%
Data as of 4:03pm ET

Sections

Drug makers, airlines and entertainment companies are among the stocks that some investors say could be impacted by the worst Ebola outbreak in history. More

With oil and gas prices falling, some in Washington are questioning whether it makes sense to hold 106 days worth of supply in storage. More

Shares of Facebook recently topped $80. They've more than quadrupled from their post-IPO lows of two years ago. Can Mark Zuckerberg keep the momentum in mobile going? More

Using technology developed for the military and implemented in Iraq, schools have installed alarm systems that detect gunfire. More

Big purchases often come with big expectations. So it's no wonder that in a recent survey 80% of homebuyers said they regretted at least one thing about their home. Here are ways to improve those odds. More

Most stock quote data provided by BATS. Market indices are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer.

Morningstar: © 2014 Morningstar, Inc. All Rights Reserved.

Factset: FactSet Research Systems Inc. 2014. All rights reserved.

Chicago Mercantile Association: Certain market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved.

Dow Jones: The Dow Jones branded indices are proprietary to and are calculated, distributed and marketed by DJI Opco, a subsidiary of S&P Dow Jones Indices LLC and have been licensed for use to S&P Opco, LLC and CNN. Standard & Poor's and S&P are registered trademarks of Standard & Poor’s Financial Services LLC and Dow Jones is a registered trademark of Dow Jones Trademark Holdings LLC. All content of the Dow Jones branded indices © S&P Dow Jones Indices LLC 2014 and/or its affiliates.