AEC Website compromised

[whzzz28]

Was visiting AEC's website today and noscript blocked a script from running followed by MSE advising of a trojan.

Appears AEC's website has been infected by a JS drop trojan (BlacoleRef.dd), hiding down the bottom of the menus.js file (obfuscated of course).
More info here: http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Trojan%3aJS%2fBlaco leRef.DD&threatid=2147680196#tab=1

So if you have visited the AEC website lately, i suggest doing a virus scan on your system.

I have advised Claude so hopefully it will be resolved soon.

[Leon_AEC]

Hi All,

The server the website was on was infected, that is to say the infection was uploaded directly to the iiNet server not from infected files on our end. We took the website offline while we checked our systems - no infections on our side, so it was definetely a problem with our IP's server.

Thank you to everyone who let us know about the virus warnings they received.

The website is back up.

Leon
Astronomy & Electronics Centre

[Nikolas]

here I was thinking it was the
australian Electoral commission!!!