Dolphin Stadium Malware Analysis

Via Websense Security Blog -

Last Friday, we discovered malicious code on the official website of Dolphin Stadium. A malicious attacker had successfully compromised the site, placing a link to a malicious javascript file in the front-page header of the site. Visitors to the site execute the script, which attempts to exploit two vulnerabilities: MS06-014 and MS07-004. If either of these exploit attempts are successful, the computer becomes infected with a malicious file. This post is going to focus on those downloaded malicious files.

Last Friday’s Alert - http://www.websense.com/securitylabs/alerts/alert.php?AlertID=733

-----------------------------------

As always, get the full details from the Websense blog link above...