4 ms·
AFAIK, there was nothing vulnerable in the widget itself: the hackers accessed Outbrain's admin panel, and changed the content of their recommended links to poi
by bentlegen 13y ago
AFAIK, there was nothing vulnerable in the widget itself: the hackers accessed Outbrain's admin panel, and changed the content of their recommended links to point to their website instead.
The hackers posted screenshots of accessing the admin panel: http://mashable.com/2013/08/15/outbrain-hacked/ http://mashable.com/2013/08/15/outbrain-hacked/
- seliopou 13y agoWhat was reported[1] was that certain stories were redirecting users to the SEA's site. This implies that they weren't just rewriting recommended links, but were changing the code of the widgets, which resulted in that behavior. [1]: http://www.politico.com/blogs/media/2013/08/washington-post-hacked-170594.html http://www.politico.com/blogs/media/2013/08/washington-post-...
- bentlegen 13y agoAh, you're right. This screenshot actually shows the HTML they injected: http://rack.0.mshcdn.com/media/ZgkyMDEzLzA4LzE1L2E1L3RpbWVzYWZmZWN0Ljg0OWQ0LmpwZwpwCXRodW1iCTEyMDB4OTYwMD4/ac8169ff/d19/times-affected-outbrain-admin-panel.jpg http://rack.0.mshcdn.com/media/ZgkyMDEzLzA4LzE1L2E1L3RpbWVzY...