Hackers planted malicious script on the site of an Indian anti-virus firm this week. The website of AVsoft Technologies was attacked by unidentified miscreants in order to distribute a variant of the Virut virus.

AVsoft Technologies makes the SmartCOP antivirus package. One of the download pages of the site was boobytrapped with malicious code that used the infamous iFrame exploit to push copies of the Virut virus onto visiting unpatched (or poorly patched) Windows PCs.

The technique is a popular method for turning the websites of legitimate organisations in sites for drive-by malware downloads. Virut opens up a backdoor on infected PCs, allowing hackers to download and run other malware (or anything else they fancy) onto infected computers.

The compromise of AVsoft's site came to light via a post on a full disclosure mailing list on Thursday. It's unclear whether of not AVsoft has since purged its site (which remains available) of nasties. ®

Related stories

• Mass SQL injection hits English language websites (21 May 2008)
• Updated Security gumshoes locate source of mystery web compromise (16 April 2008)
• Poisoned websites staying contaminated longer (31 March 2008)
• Malware writers think global, act local (22 February 2008)
• Web browsers on the front line of exploitation (15 February 2008)
• Updated Forth Road Bridge hack redirects to smut bazaar (7 February 2008)
• Hacked embassy websites found pushing malware (23 January 2008)
• Drive-by download menace spreading fast (23 January 2008)
• Mystery web infection grows, but cause remains elusive (16 January 2008)
• Attackers turn Bank of India site into malware bazaar (1 September 2007)
• Hackers load malware onto Mercury music award site (7 June 2007)