Applicure’s Customers were not Affected by the Latest Mpack Mega-attack

A combined hacking attack using the Mpack hacking package compromised over 10,000 sites, causing tremendous damage to hosted websites and their visitors. Hackers used the sites to disseminate malware that stole passwords and sensitive information from users. This mega-attack targets hosted sites throughout the world, with the main focus on Italian ISPs.

Attackers used a two-stage method, first hacking websites through a vulnerability in the IFRAME tag, and planting malicious code within the website. This code later infected unsuspecting users with malware known as the Mpack package, which is sold by a Russian hacker's gang.

Mpack is priced at a mere $700 - $1,000, with an optional module that prevents the files from being detected by anti-virus software. Site visitors affected by this version are exposed to the malware even if they update their anti-virus protection.
The Mpack attack is notable for the way it uses hundreds of websites to disseminate malware, proving yet again the need for application security measures in each and every website.

Applicure Technologies, an expert in application security, includes security rules addressing the iFrame vulnerability in all its products. In addition, the company released today a security update adding dedicated blocking of the Mpack code.
Applicure’s software provides dedicated application security to websites and internal applications, supporting both IIS and Apache. Based on an extensive rule-set, the product identifies patterns of hacking attacks, and blocks them. Automatic update ensures protection against emerging threats such as Mpack.

David Allouch, Applicure’s CTO, commented: “Criminal hackers are always searching for new ways to compromise websites and steal valuable information. The Mpack attack combines familiar methods in an original way, so we decided to release a specific update to enhance our customers’ confidence.”


About Applicure Technologies
Applicure Technologies Ltd (TASE: APCR) creates software-based products for web application security. IT Week recognized Applicure’s achievements and named it one of the Top 100 Vendors in 2006. For more information, please visit: www.applicure.com