Fair Use: Please note that use of the Netcraft Blog is subject to our Fair Use and Copyright policies. For more information, please visit http://news.netcraft.com/fair-use-copyright, or email info@netcraft.com.
  1. Hackers Manipulating Internet Explorer Add-Ons

    Hackers have found yet another way to compromise Internet Explorer, adding Browser Helper Objects to their toolkit in mounting ever-more sophisticated phishing attacks. A series of recent exploits have penetrated security holes in fully-patched versions of Microsoft's browser to steal users' online banking passwords, adding to a growing crisis of confidence in Internet Explorer, and perhaps online banking as well.

    The latest phishing attack, analyzed by the SANS Institute, builds upon existing IE exploits to install software that records keystrokes on the machines of unsuspecting Internet users. The keylogger is coded as a Browser Helper Object (BHO), an add-on technology introduced by Microsoft to allow programmers to customize Internet Explorer. Browser helpers are DLL components that load with Internet Explorer and share the browser's access and permissions. "In short, a BHO works as a spy we send to infiltrate the browser's land," Microsoft writes in its description.

    (more...)

    Posted by Rich Miller on 30th June, 2004 in Security Share

  2. Yahoo Slashes Domain Name Pricing by $20

    How many providers can say they've cut annual domain registration fees by $20 per domain? Yahoo, for one, after its move this month to slash domain fees from $35 to $14.70 per year, a 58 percent reduction. With the reduced fee, Yahoo repositions itself within the domain name game, where its $35 fee made it one of the most expensive options.

    Yahoo remains a reseller, buying its domains from Australian wholesaler Melbourne IT, which manages the domains. Yahoo isn't saying whether it obtained a better rate from Melbourne IT or has decided to accept less profit per domain to offer a more attractive price, but describes the new rate as a "marketing promotion" rather than a permanent change. For the moment, the price cut makes Yahoo's web hosting services slightly more affordable for its target small business customer. The web portal is already one of the top players in the small business hosting market with more than 587k hostnames.

    Retail Domain Name Prices, May 2004
    Company One-year
    .com price
    &nbspPrimary Business&nbsp Primary Region
    1&1 Internet AG $5.99 Mixed Hosting Europe
    EV1Servers $6.49 Dedicated Hosting America
    Hostway $6.95 Shared Hosting America
    Web.com $6.95 Mixed Hosting America
    AIT Domains $6.95 Mixed Hosting America
    DomainSite $6.99 Domain Registrar America
    Go Daddy Inc $8.95 Domain Registrar America
    RegisterFly $9.99 Domain Registrar America
    Yahoo $14.70 Shared Hosting America
    Dotster $14.95 Domain Registrar America
    Host Europe $15.56 Mixed Hosting Europe
    FastHosts $16.28 Mixed Hosting Europe
    eNom $29.95 Domain Registrar America
    Network Solutions $34.99 Domain Registrar America
    Register.com $35.00 Domain Registrar America

    (more...)

    Posted by Rich Miller on 29th June, 2004 in Hosting Share

  3. Facing the music

    One of the key factors driving new applications and wider adoption of the Internet has been the increasing bandwidth available to the public. For example, the World Wide Web started to take off among ordinary computer users in the mid-1990s once images were added to pages, and this only became feasible when dial-up modem speeds had increased sufficiently to allow graphics to appear after a few seconds' downloading.

    Another instance of how access speed sparked a dramatic shift and rise in online use occurred at the end of the 1990s, when it became possible to download digital music files in a reasonable time, thanks to the rediscovery of an older compression technology, MP3 - strictly speaking MPEG Audio Layer-3. Taking advantage of this, millions of young people started to swap tracks from CDs through Napster, and a huge new class of users were drawn in to the world of the Internet.

    (more...)

    Posted by Glyn Moody on 28th June, 2004 in Around the Net Share

  4. IIS Server Malware is Phishing Scam

    The malicious code downloaded from compromised IIS servers onto users' machines includes a trojan that records keystrokes in an attempt to steal e-commerce login information, according to a detailed analysis by LURHQ. The trojan attempts to capture eBay and Paypal passwords and send them to third parties "through the use of hidden IE windows using HTML forms and Javascript to autosubmit," according to LURHQ.

    Microsoft says the exploit affected servers running Windows 2000 and IIS 5.0 server that are not fully patched against a bevy of security holes detailed in April, known collectively as MS04-011. The initial version of the patch included bugs that crashed Win2K systems. Microsoft posted a web page confirming the IIS issue and referring system admins to a knowledgebase article detaling the workarounds and fixes available for affected Win2K machines.

    Internet users wanting to avoid potentially vulnerable sites can use Netcraft's What's That Site Running feature to determine a site's operating system and web server version.

    (more...)

    Posted by Rich Miller on 25th June, 2004 in Security Share

  5. IIS Exploit Infecting Web Site Visitors With Malware

    Malicious code is being spread through numerous web sites running Microsoft web servers, automatically infecting Internet users who visit these sites. Affected sites include "businesses that we presume would normally be keeping their sites fully patched," said the SANS Institute, which describes the exploit as a "widespread issue."

    The method of infection appears similar to an exploit reported last year at Interland, in which a footer file inserts malicious code onto a web page, instructing the user's browser to download a trojan. In the new exploit, compromised Internet Information Servers (IIS) are seeding HTML files with footers containing Javascript code, which then uses a sophisticated new hacking technique to trick fully-patched versions of Internet Explorer into downloading a trojan - in this case, one known as "msits.exe" residing on a server in Russia.

    (more...)

    Posted by Rich Miller on 25th June, 2004 in Security Share

  6. 1&1 Launches Windows Server 2003 Marketing Push

    1&1 Internet AG has launched a marketing push for its new Microsoft hosting plans, offering shared hosting accounts on Windows Server 2003 starting at $4.99 per month.

    With more than 3.9 million hostnames, Germany's 1&1 is the world's largest hosting specialist. The overwhelming majority of its sites are powered by Linux, with just 88,000 of 1&1's hostnames on Windows, almost all of them in its German operation. 1&1 showed its marketing muscle with its entrance into the U.S. market earlier this year, as it has quickly gained more than 147K hostnames and 78K active sites.

    Schlund.us Hostname Gains

    (more...)

    Posted by Rich Miller on 25th June, 2004 in Hosting Share

Page 1 of 512345