Irish Stock Exchange Website Compromised

I regularly read the US-CERT (United States – Computer Emergency Readiness Team) website to follow current activity. This morning, there was a warning of an attack that has compromised a large number of legitimate websites. One of the compromised sites generated quite a bit of media attention since it’s a security related website. However, I thought it might be interesting to see if any other well known websites had also been compromised.

After a little searching I saw that the Irish Stock Exchange website, www.ise.ie had been a victim of the attack. The Announcement List asp page had been compromised in an attempt to add a link to a malicious Trojan hosted on a different web server. Fortunately, this issue has already been resolved but evidence of the attack against the site is revealed in a google cache search of the announcement page.