EURO 2008 INFO

It appears another code injection attack at a site reselling tickets for the Euro 2008 soccer matches put visitors at risk of a drive-by infection.

The desire for coveted tickets to the UEFA Euro 2008 tournament leads many people to alternative ticket sources when the official ones dry up. In the case of one unnamed reseller, footy fans received more than just ducats when stopping by.

Security vendor Sophos said visitors to the reseller would be exposed to a malicious script during the purchasing process. This script calls additional malware from a remote server to attack the visiting PC.

Fraser Howard said on the Sophos blog he had no success trying to get the site to fix the problem, with email and telephone contact proving fruitless.

"Using search engines to find a suitable ticket vendor shows the site has quite a high ranking, including a presence amongst the sponsored links," he said. This makes it likely fans will try to visit the site in significant numbers.