
Just when you thought you’ve seen the end of hacked cinema’s website (refering to Malaysia’s GSC website), another one surfaces at TGV.com.my just about 3 months later. According to SANS Internet Storm center, this type of SQL injection uses SQL commands to attack the “sysobject” and “syscolumn” in the database and particularly a website that uses Active Server Pages(ASP).
Continue reading ‘TGV Malaysia website hacked with SQL injection’

“Today as I surf to GSC.com.my - place where most Malaysians make their bookings for cinema tickets, AVG Security Toolbar alerted me of a JS/Downloader.Agent threat coming from 2117966.net!”
All Malaysian’s should take the necessary step not to visit this site at the moment until this problem is fix.
Update: GSC has removed the exploit. You can now surf GSC.com.my without any worries.
Continue reading ‘Malaysia’s GSC website hacked with 2117966.net’

Guys over at the F-Secure Blog reported that the Malaysian F1 Sepang Circuit website was defaced by a hacker by the nickname CuciOtak(Brain Wash in English) just hours before the F1 race event started on March 21, 2008.
Continue reading ‘Malaysian F1 Circuit website was hacked!’