New computer virus infects key government and consumer websites

London, July 23 : Eastern European hackers are suspected of placing the Asprox virus on more than a thousand British websites, which including key government and consumer websites, in the past two weeks.

According to a report in The Times, using the virus, the hackers have been able to steal the personal details of anyone browsing the sites.

Experts described the Asprox virus as an alarming departure from commonplace viruses which tend to be spread through rogue e-mails and unregulated websites.

Unlike other viruses, Asprox sits undetected on mainstream sites, with any visitor at risk of being infected. The virus automatically installs itself on a visitor's computer, allowing a hacker to access financial information.

It is not known how many people are affected by the virus, but security experts estimate that it has spread to at least two million computers worldwide.

Detective Constable Bob Burls, of the Metropolitan Police computer crime unit, said that there had been a sudden rise in infection rates.

"The virus got into the job pages of a local council's internet page," he said. "It's a new thing that people who visit mainstream websites are clobbered," he added.

Such incidents have only come to light after people have found money removed from their bank accounts or other personal data frauds.

Last week, Asprox infected the Norfolk NHS website, used by thousands of people a day.

Hackney Council's website was one of 12 local council websites also compromised, meaning that anyone logging on to pay a parking ticket or council tax was at risk over a three day period.

According to Yuval Ben-Itzhak, chief technical officer of Finjan, an online security company who exposed the rapid growth of Asprox around the world, this is very serious threat.

"Five years ago when your computer got infected by a virus, you noticed immediately that your PC was broken. These days, you don't notice anything. This is exactly what the hacker wants. It gives him complete control over the infected machine," he said.

Once installed on a personal computer, the Asprox virus allows a hacker to steal files, e-mails and passwords. It can also be used to infect other computers and even make attacks against companies and foreign governments.

Any computer without up-to-date anti-virus software is vulnerable.

According to a spokeswoman for Apacs, the payments organization, "There is a responsibility on website owners to ensure that they have sufficient security software installed so that criminals are not able to easily compromise their sites."

"This combined with users not downloading any pop-ups, or falling into any other traps such as those, does considerably reduce the chance of a criminal being able to infect their PC with malware," she added.

ANI