Bots and Worms

WHID 2008-18: Winzipices SQL bot

Another member of the wave of SQL injection bots injecting malware inflicting code to web sites.

Additional information:

SQL Injection Worm on the Loose [SANS Internet Storm Center, May 7 2008]
New SQL Injection Attacks and New Malware: winzipices.cn [ShadowServer, May 7 2008]

Attack Method:

Incident Outcome:

Planting of Malware