Asprox Botnet Installs SQL Injection Tool

re: Asprox Botnet Installs SQL Injection Tool

Applicure Technologies — Fri, 31 Oct 2008 02:53:38 GMT

Here is the correct download link:

www.applicure.com/.../idevaffiliate.php

re: Asprox Botnet Installs SQL Injection Tool

Jerry Mollany — Fri, 17 Oct 2008 09:13:15 GMT

Our website was under attack with some kind of an injection.

We tried to deal with it for 2 weeks with no success.

We tested a few products and eventually, we found a tool name dotDefender that actually stop all those attacks and more of them that appeared in the log files.

The main site where you can download dotdefender for 30 days is at: http://www.applicure.com

Jerry M.

re: Asprox Botnet Installs SQL Injection Tool

Raviv Raz — Mon, 13 Oct 2008 16:59:43 GMT

More details on ASPROX, SQL Injections at:

chaptersinwebsecurity.blogspot.com/.../asprox-silent-defacement.html

You can find download links for:

- Injector: tests for ASPROX vulnerability on websites

- dotDefender: protects web sites against ASPROX

Raviv

re: Asprox Botnet Installs SQL Injection Tool

Kamal — Wed, 01 Oct 2008 15:05:52 GMT

Researching Asprox and Beanie seems to turn up everywhere, spammer....

re: Asprox Botnet Installs SQL Injection Tool

lo; — Thu, 18 Sep 2008 11:59:59 GMT

l;l

re: Asprox Botnet Installs SQL Injection Tool

Beanie — Wed, 30 Jul 2008 22:25:24 GMT

This virus took my site offline for 3 weeks and I had to seek an internet security company to fix my site.

It cost me £50 but well worth it after the hastle I have had!!

Hope this helps others:

www.firestorm-online.com/.../asprox

re: Asprox Botnet Installs SQL Injection Tool

Yossarian — Thu, 03 Jul 2008 11:56:48 GMT

We recently had a bunch of sites hit by the SQL injection. It is a nightmare. It looks like we had one vulnerable querystring that we had overlooked. It took 3 days to find it as well. As it is all automated even if your site gets hacked and you clean the data you either need to take the site completely down or monitor it 24/7 until the vulnerabilities are discovered.

We found the attacks would be occur hourly in some cases.

I guess it is a lesson learned to triple check every querystring & sql statement.