Showing results for 
Show  only  | Search instead for 
Did you mean: 

Nine Ball

I wanna warn Site Advisor Developers of it....If they are not already aware of it....
else other users may find it useful....

Nine Ball is a recent multi-layered Web browser attack that have already infected approximately 40,000 sites. Nine Ball targets legitimate websites to redirect users to malicious sites owned by the attacker and infects PCs through a number of exploits, including Adobe Reader and Quick Time, and then trying to download Trojans and keylogger code without the user’s consent or knowledge. Once infected, anything the victim types can be monitored and used to commit identity theft, such as credit card numbers, passwords and more.

According to Websense, the compromised website, loaded with malware, will first try to identify a visitor by IP address to discover if it’s a repeat visitor. To evade security researchers and investigators who would likely be among any repeat visitors, the Web page will dump a repeat visitor onto

If a web visitor is new, the victim is pushed through a few more re-directions to land at the site broken link removed- MOD (sometimes a .cn domain), which may sound like a site in India, but is in Ukraine.

The final stop for a Web victim includes a drive-by download attempt after the malware checks for vulnerabilities in the browser, Adobe or Quicktime software on the user’s desktop. If it succeeds, the attack will download a Trojan with a keylogger component that many anti-virus software packages do not yet identify, according to Websense.

There are a number of security failures that can help Nine Ball to compromise so many Web sites, including SQL-injection attacks on susceptible websites as well as bots that have stolen user passwords and logins for administrators of websites.
3 Replies

RE: Nine Ball

Thanks for posting but they wont read it here. Use their feedback form linked in the stick "How to Contact...." at the top of this forum.

Or here:

RE: Nine Ball


This was my first post...
I posted it in the correct place...


RE: Nine Ball

Yes you did. Good luck.:)
How Many Badges Can You Collect?
Ready for a little competition? Members like you are earning badges and unlocking perks for their helpful answers. Are you? Click here to find out.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community