Asprox Botnet Compromises Web Sites

A botnet is being propagated in a worm-like fashion and infecting vulnerable web sites. Once a web site is compromised, it redirects users to download a malware package, which also includes the Asprox code. The Asprox code then seeks out new vulnerable web sites to compromise and continue to spread. Asprox uses SQL injection on vulnerable Active Server pages to compromise weak sites. According to this report from The Register, the SQL injection attack has compromised about 1,000 web pages thus far, and only 4 of the 32 antivirus products tested were able to detect or identify the threat.