Adobe Exploits Compromising Websites

LOS ANGELES — Computer security experts are issuing a warning about Adobe software exploits which are compromising the security of an increasing number of web servers and the sites that they host.

In a recent letter to its clients, adult web hosting provider MojoHost said that it had caught attacks at an early stage, before most of its customers encountered this problem.

"To give this scenario perspective, in the last week we have identified [several] clients where in the final analysis it was determined this exploit of client side software has been the culprit," stated a MojoHost representative.

The United States Computer Emergency Readiness Team is monitoring the situation and according to the US-CERT website, the attack is a drive-by-download exploit with multiple stages and is being referred to as "Gumblar."

"The first stage of this exploit attempts to compromise legitimate websites by injecting malicious code into them," stated a Team report. "Reports indicate that these website infections occur primarily through stolen FTP credentials but may also be compromised through poor configuration settings, vulnerable web applications, etc."

The exploit's second stage occurs when users visit a Gumblar-infected website.

"Users who visit these compromised websites and have not applied updates for known [Adobe] PDF and Flash Player vulnerabilities may become infected with malware," the Team report continued. "This malware may be used by attackers to monitor network traffic and obtain sensitive information, including FTP and login credentials that can be used to conduct further exploits."

"If you are not running the most recently patched versions of Adobe Acrobat and Adobe Flash Player, you are at risk for compromising your websites," the MojoHost rep said. "This poses a significant security risk to your server and websites, leading to attackers using client FTP credentials to deface websites and insert malicious code which can exploit things further."

The Team report also states that Gumblar redirects Google search results for infected users.

As for what to do about the situation, US-CERT "encourages users and administrators to apply software updates in a timely manner and use up-to-date antivirus software to help mitigate the risks."

The agency will provide additional information as it becomes available.

"This unexpected exploit of everyday software is a lesson to everybody about just how fragile things truly can be," the MojoHost rep concluded; recommending that webmasters of affected sites contact their hosting support team to help mitigate any damage and to issue a new FTP password.

Readers are urged to update their software by visiting the publisher's websites: get.adobe.com/flashplayer/ and get.adobe.com/reader/.

Related:  

Copyright © 2025 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More News

European Commission to Assess Pornhub, XVideos, XNXX Compliance With Digital Services Act

The European Commission plans to conduct a study to determine how well adult sites Pornhub, XVideos and XNXX are addressing illegal content and other potential harms under the EU’s Digital Services Act.

German Higher Court Upholds Ban on PornHub, YouPorn

The Higher Administrative Court of Rhineland-Palatinate on Thursday upheld a “network ban” on Aylo-owned adult sites Pornhub and YouPorn for failing to comply with German age verification regulations.

Alabama Notifying Adult Sites of New Tax Set to Take Effect Sept. 1

The Alabama Department of Revenue has begun sending notices to adult site operators about a new 10% tax on their revenues, set to be enforced starting Sept. 1.

Ondato, CCBill Announce Strategic Partnership for Global High-Risk Market

Age and identity verification firm Ondato and payment processor CCBill have formed a strategic partnership to serve the global high-risk market.

Ofcom Investigates 4 More Adult Companies for OSA Compliance

U.K. media regulator Ofcom has launched investigations into whether four companies operating adult websites have implemented requisite age assurance measures under the Online Safety Act, the agency announced Thursday.

Taylor Nicole Launches New Site Through YourPaysitePartner

Creator Taylor Nicole has launched her new official website through YourPaysitePartner (YPP).

Adult Networking Platform SpicyGigs.com Launches

SpicyGigs, a new adult industry networking platform, has officially launched.

Pineapple Support to Host 'Cream Pie Challenge' Fundraiser

Pineapple Support is hosting its Cream Pie Challenge through August to raise funds for mental health services for industry performers.

Kyrgyzstan President Signs Measure Outlawing Internet Porn

President Sadyr Japarov of Kyrgyzstan on Tuesday signed into law legislation outlawing online adult content in the country.

NC Legislature Overrides Veto of Extreme Anti-Adult Industry Bill

The North Carolina state legislature on Tuesday voted to override Gov. Josh Stein’s veto of a bill imposing regulations that industry observers have warned could push adult websites and platforms to ban most creators and content.

Show More