According to security firm Sophos SQL injection vulnerabilities on the US Sony Playstation website have left visitors at risk of malware infection on their PC. The site was hit by hackers and malicious code was inserted on pages for the games SingStar Pop and God of War.

The code promotes scareware to visitors by claiming that their machines are infected with computer viruses to get them to purchase software with no value. Sophos says that this technique could be used to serve Trojans or other forms of malware as well.

Sophos says hackers use automated tools and search engines to find sites that suffer from exploits and then booby-trap them to push malwares to targets. HP and Microsoft have published a set of tools to help plug these security holes.

Via The Register