Adobe website suffers SQL injection attack
The threat of the SQL infection rears its ugly head again as Adobe becomes the latest big brand to suffer an attack on its website.

Visitors to the Adobe website were warned to be vigilant after security firm Sophos revealed that it had hosted malicious code which could infect visiting computers.
Sophos said that it had repeatedly tried to contact Adobe about the problem, with the malicious code present until last Thursday.
The vendor identified the threat Mal/Badsrc-C' as being present on the Adobe website's Vlog IT support centre section', an area which provides tips for video bloggers.Sophos said that Mac/Badsrc-C was a dangerous piece of malware which spread by infecting PCs with SQL injection. This downloaded malicious scripts from the net to infect users with spyware.
SQL infection has been an increasing problem this year, with many legitimate sites suffering web-based malware attacks.
Graham Cluley, senior technology consultant at Sophos, quoted a figure of over 90 per cent of web infections being found on legitimate sites.
He said: "Organisations need to wake up and ensure their websites are properly coded, and that security is in place to stop these kinds of attacks."
Sophos also discovered a new mobile virus called Troj/Konov-A, a Trojan horse which sent out SMS messages to premium rate numbers.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Adobe could not be reached for comment at the time of publication.
-
What is polymorphic malware?
Explainer Polymorphic malware constantly changes its code to avoid detection, making it a top cybersecurity threat that demands advanced, behavior-based defenses
-
Outgoing Kaseya CEO teases "this is just the beginning" for the company
Opinion We spoke to Fred Voccola who remains a key figurehead at the firm as it enters its next chapter...
-
96% of SMBs are missing critical cybersecurity skills – here's why
News The skills shortage hits SMBs worse as they often suffer from a lack of budget and resources
-
Sophos Firewall Virtual review: Affordable network protection for those that like it virtualized
Reviews Extreme network security that's cheaper than a hardware appliance and just as easy to deploy
-
MSPs are struggling with cyber security skills shortages
News A shortage of tools and difficulties keeping pace with solutions were also ranked as key issues for MSPs
-
Nearly 70 software vendors sign up to CISA’s cyber resilience program
News Major software manufacturers pledge to a voluntary framework aimed at boosting cyber resilience of customers across the US
-
Sophos and Tenable team up to launch new managed risk service
News The new fully managed service aims to help organizations manage and protect external attack surfaces
-
Ransomware groups are using media coverage to coerce victims into paying
News Threat actors are starting to see the benefits of a more sophisticated media strategy for extracting ransoms
-
Shrinking cyber attack “dwell times” highlight growing war of attrition with threat actors
News While teams are becoming more proficient at detecting threats, attackers are augmenting their strategies
-
Warning issued over “incomplete” fix for Adobe ColdFusion vulnerability
News An incomplete fix for a vulnerability disclosure could be placing users at risk, researchers warned