Compromised Site: The Consulate of the Republic of Kazakhstan in Toronto

Date:01.06.2009

Threat Type: Malicious Web Site / Malicious Code

Websense® Security Labs™ ThreatSeeker™ Network has discovered that the official Web site of the Consulate of the Republic of Kazakhstan in Toronto has been compromised. Multiple pages on the site, including the home page, contain malicious JavaScript code. The code de-obfuscates into multiple iframes that deliver malicious payloads from different hosts.

The Consulate of the Republic of Kazakhstan in Toronto performs all the usual consular functions relating to visa requirements, legalization, and authentication of signatures on documents. Websense ThreatSeeker Network has been tracking how such attacks prevail over reputed Web sites, targeting their peers and other visitors.

Screenshot of infected site:

Screenshot showing infected site source, and the malicious payloads:

Websense Messaging and Websense Web Security customers are protected against this attack.

•  Subscribe to this feed »