Sage Issues Malware Advisory For April 14 Support Knowledgebase Visitors [Updated]

We’ve just received a copy of an advisory that Sage seems to have sent about 4pm EST on 4/15/2010 to users who visited their support knowledgebase on April 14, 2010.

UPDATE – 4-16-2010:
The Infosource knowledgebase is live and available to Sage business partners and customers. The message stating the site is down for maintenance has been removed. The site has been tested and everything appears to be in working order. If you come across any knowledgebase issues, please notify Sage MAS Customer Support at (800) 854-3415 immediately.

On Wednesday 4/14/10 we’d been alerted by several users that as of about 10am EST the Sage KB seemed to be attempting to redirect web visitors. Shortly after we began receiving reports of unusual activity the KB site went down and it remains unreachable as of 8pm on 4/15/10.

The notice on the Sage site indicates that the Sage knowledgebase is down for maintenance.

According to Sage’s alert:

Our records indicate that you visited our support website on April 14th, 2010. If you accessed our Sage knowledgebase, you might have been redirected to a malware site. Sage was able to prevent the redirection, and install protection against future intrusions. The knowledgebase will be back in service as soon as possible.

If you visited our website from a corporate environment, your firewall should have protected your systems. Please work with your information systems or technical staff to verify that your systems were not affected.

If you are a Sage partner who accessed our knowledgebase from your site or from a customer site, please alert your IT staff or your customer of a potential compromise. As noted above, the redirection to the malware site has been completely removed and safeguards are installed on our support website.

For more information about the malware, see the Google Advisory:

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=free22smart.com

This information seems to corroborate the anti-virus alert that one Sage partner sent to us.