SANS Warns of SQL Injection Attacks

SANS Internet Storm Center has updated their website with additional information related to large numbers of SQL injection attacks. Their site includes some helpful links.  One of the links is for Shadowserver.org who has begun maintaining a list of domains used in the mass SQL injection attacks.

The US-CERT has alerted companies and government agencies to act. They encourage a review of internal web content for references to these domains. They also encourage reporting back to the US-CERT with any confirmed compromises. Of course, the domains listed should NOT be visited.

For more information, you can visit SANS.org or the Showdowserver website at:

http://www.shadowserver.org/