Malicious Code on Storage and Caching Servers

A new trend identified by Finjan researchers is the existence of malicious code on storage and caching servers, such as those used by ISPs, enterprises and search engine companies. This malicious code can be referenced to by third party web pages and can be used to exploit an end user’s machine. Such ‘infection-by-proxy’ is a new threat for businesses using reactive security technologies like URL Filtering.

The examples below present several instances of malicious code found by Finjan security researchers on public storage and caching servers of three popular providers.

Example 1- Malicious code on caching server

Example 2 – Encoded malicious code on caching server

Example 2 - Decoded malicious code on caching server

Example 3 - Malicious code on caching server

For full review of the Finjan Q3 2006 Web Security Trends Report, please click here