Pharmacy Spam Blogs At U.S. Nuclear Safety Lab
The Web site for the institution charged with safeguarding the safety and integrity of the U.S. nuclear arsenal has been inadvertently hosting advertisements and blogs that link to illegal prescription drug sites hawking everything from generic painkillers to erectile dysfunction medication, Security Fix has learned.
Dozens of pages belonging to the official Web site of Lawrence Livermore National Labs appear to have been seeded with the unauthorized advertisements. Beneath each of the full-page ads were a series of blog entries that featured a bizarre mixture of information, including what appears to be ill-translated gibberish interspersed with information that is actually relevant to the advertised drugs.
Security Fix located the pharmacy spam pages by conducting a series of simple Google searches, such as this one.
The sites are all now inactive, and it's not entirely clear how long they were up. According to the oldest date on the time-stamped blog entries, the attackers first began planting the ads and blog posts as early as March 2007.
Update, 11:01 a.m., Aug. 27: After this blog post was published, a source of mine pinged me to say that until this past weekend, several pages on the Lawrence Livermore site were redirecting visitors to other sites that tried to take advantage of Web browser security flaws to install malicious software. These weren't just hyperlinks inserted into an existing page on the government site: They were clearly pages on the government server that were created by malicious attackers, the source said.
Posted by: Sean | August 25, 2007 7:49 PM | Report abuse
Posted by: JohnW | August 25, 2007 8:49 PM | Report abuse
Posted by: antibozo | August 25, 2007 9:30 PM | Report abuse
Posted by: AskTheAdmin | August 26, 2007 6:27 PM | Report abuse
Posted by: Bk | August 26, 2007 7:49 PM | Report abuse
Posted by: burke | August 26, 2007 8:30 PM | Report abuse
Posted by: tim finin | August 26, 2007 9:45 PM | Report abuse
Posted by: antibozo | August 27, 2007 5:13 AM | Report abuse
Posted by: antibozo | August 27, 2007 5:21 AM | Report abuse
Posted by: antibozo | August 27, 2007 5:23 AM | Report abuse
Posted by: antibozo | August 27, 2007 9:41 AM | Report abuse
Posted by: Steffen | September 26, 2007 4:41 PM | Report abuse
The comments to this entry are closed.