TechCrunch hacked to distribute Zeus Trojan via JavaScript file
Technology blog TechCrunch was flagged by malware-detections yesterday after it was infected by a variant of the Zeus Trojan.
It was initially detected by security blogger The Harmony Guy, who asked on Twitter if anyone else was getting malicious PDFs from pages at TechCrunch Europe and later claimed that a JavaScript file he identified had 'some mangled code at the start which loads an iframe from virtuellvorun.org'.
Graham Cluley, senior technology consultant at Sophos, with whom the Harmony Guy conversed about the detection, said that the website appeared to have fallen victim to hackers who planted a malicious script on their site that was designed to infect unsuspecting visitors.