GSC Website Hacked?
Friday, July 25th, 2008 | 379 ViewsJust now wanted to book movie for Batman, The Dark Knight online from GSC website but it encounter the following error when I tried to login.
Microsoft OLE DB Provider for SQL Server error ‘80004005′
Transaction (Process ID 275) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.
/2007/_login/login_engine1.asp, line 99
is GSC being hacked again or it’s only the webmaster/programmer mistake? Some of the reader even said GSC website always timeout when buying tickets online, but for me so far I have been purchasing tickets with my Credit Card, it fast and smooth experience for me =)
Few months back it was hacked with 2117966.net
Today as I surf to GSC.com.my - place where most Malaysians make their bookings for cinema tickets, AVG Security Toolbar alerted me of a JS/Downloader.Agent threat coming from 2117966.net!”
All Malaysian’s should take the necessary step not to visit this site at the moment until this problem is fix.
Update: GSC has removed the exploit. You can now surf GSC.com.my without any worries.We have made a report on our blog not too long ago about 10,000 website injected with malicious iframe - this is the same threat that is affecting GSC’s website. This particular threat takes advantage of the vulnerability in Internet Explorer ActiveX and SANS Internet Storm Center said that as a result of this threat a password-stealer program will be installed on the infected machine.
AVG alert of 2117966.net
Further looking at GSC’s html source code, we found related code entries to load a javascript “fuckjp.js” from 2117966.net.
source : drsafemode.com
