IssViews Forum

U.S. Treasury Website Hacked Using Exploit Kit
Posted on 05/4/10 by Sean-Paul Correll

Time and time again we talk about how amateur and professional hackers alike are able to use automated toolkits which can identify security vulnerabilities on a computer and exploit them with little or no technical skill necessary for the cyber criminal. The spirited script kiddies behind these kits have been running havoc on the Internet, as many of the kits available can be downloaded in underground forums for free. Today, we came across an embedded iframe inside of the Department of Treasury website. This iframe (pictured below) is used to silently load one of the elenore exploit kits main URL’s, which in turn determines what’s the best available exploitation method for the browser accessing the site.