|
|
Home | Submit Press Release | Advertise | Submit Website
(EMAILWIRE.COM, December 19, 2012 ) San Francisco, CA -- The blogging site Tumblr shut down its forums earlier this month after a worm began producing offensive messages, according to SpamFighter.com.
The attack on the Internet site began through posts on different blogs. The worm affected about 1,000 blogs, TumblrÂ’s operators said in its news feed. The site halted publication of blog posts in an effort to prevent the worm from spreading.
The site was returned to normal functionality within a few hours, and Tumblr officials thanked all the siteÂ’s users for their patience.
The offensive messages came from malware that took advantage of weaknesses in the siteÂ’s software, according to experts at the anti-virus software company Sophos. Posted messages contained code that connected to malware at a different site. JavaScript with base-64 code also was inside an iframe that linked to a third site.
The attackers made it difficult to figure out how the malicious script worked by condensing ASCII text to represent large chunks of binary data.
An expert who is not affiliated with Sophos also analyzed the attack and found that the malware exploited an XSS weakness. Janne Ahlberg said the problem with the cross-site scripting remained even after Tumblr officials said the attack had been resolved.
Ahlberg set up an account with the blog using different browsers and then published a message with XSS. She said she logged on through a separate account and found the weakness remained.
Ahlberg said that more far-reaching attacks will be possible unless Tumblr acts to solve the blogging softwareÂ’s security problems.
About Authority Blogging Platform:
Authority Blogging Platform (http://authoritybloggingplatform.com/) is an online resource for marketing through social media. Visitors can find out how to increase traffic to their business site and raise income through effective blogging and online marketing strategies. People also can find tools to become highly ranked in Google search results at the website along with learning more on small business internet marketing.
AuthorityBloggingPlatform.com
Benjamin Wrights
4157669098
news@postpressrelease.com 
Source: EmailWire.com
|
|
