Name:
Location: Hyderabad, India

9/18/2005

Worm Redirects Google Searches

A new worm modifies the infected PC so attempts to search using Google are directed to a spoofed site that looks like the real thing, but with different sponsored links to drive traffic to sites the hacker's designated, a security firm said Friday.

Panda Software's analysis of the P2Load.a worm showed that after compromising a PC, it modifies the Windows Hosts file so all attempts to reach google.com -- and even mistyped addresses, such as "googel.com" -- are redirected to a site actually served from Germany.

"The page is an exact copy of Google and supports the 17 languages of Google," said Panda in a statement.

Searches run on the spoofed version of Google return results similar to the real Google, but in some cases, the sponsored links -- top-of-the-page and right-side links to e-commerce sites that have paid for the placement -- are different.

"The creator of this worm has taken advantage of the importance of a company appearing among the first few links in the search results of an Internet browser,” said Luis Corrons, director of PandaLabs, in a statement. “Its aims are none other than to increase visits to the pages linked by the creator of this malware or earn an income from companies that want to appear in the first few results in computer where the identity of Google has been spoofed…in both case, the motivation of the author of this malware is purely financial."

Because the new HOSTS file is downloaded from a Web site, not embedded in the worm's code as is the usual practice, Panda warned that P2Load.a, or similar threats, could spoof other popular sites by simply changing the content of the file downloaded.

Google has been targeted by hackers before. In March, for instance, a widespreadDNS cache poisoning attack redirected traffic from Google and other popular URLs to hacker sites. In another case, phishers and spyware creators downloaded software, including bank account theft software, to PCs when their owners mistyped google.com and ended up at a malicious site hosted by servers in Russia.

11 Comments:

Blogger Johnny said...

Traffic is the life of every website. This free traffic handbook is helpful and update, read it carefully and apply the methods it mentioned, your website traffic will boost!

10/29/2005 09:51:00 AM  
Anonymous Anonymous said...

I just came across your blog about best spyware tool and wanted to drop you a note telling you how impressed I was with the information you have posted here. I also have a web site about best spyware tool so I know what I'm talking about when I say your site is top-notch! Keep up the great work, you are providing a great resource on the Internet here! If you get a chance, please stop by best spyware tool

10/31/2005 03:15:00 AM  
Blogger Infactahost.com said...

Hey, you have a great blog here! I'm definitely going to bookmark you!

I have a guaranteed targeted web site traffic site/blog. It pretty much covers guaranteed targeted web site traffic related stuff.

Come and check it out if you get time :-)

11/01/2005 04:11:00 PM  
Anonymous Anonymous said...

What If This Could All Happen Automatically,
with a simple push of a button.....

11/01/2005 10:02:00 PM  
Blogger Brian said...

Hey, you have a great blog here! I'm definitely going to bookmark you!

I have a script traffic viral site/blog. It pretty much covers script traffic viral related stuff.

Come and check it out if you get time :-)

11/03/2005 01:20:00 AM  
Blogger Infactahost.com said...

Hey, you have a great blog here! I'm definitely going to bookmark you!

I have a free traffic school site/blog. It pretty much covers free traffic school related stuff.

Come and check it out if you get time :-)

11/05/2005 01:00:00 PM  
Blogger Johnny said...

Every online business need free traffic. This free traffic handbook is very update and helpful.

11/06/2005 11:18:00 PM  
Anonymous Anonymous said...

Hey, you have a great blog here! I'm definitely going to bookmark you!

I have a advertising direct email site/blog. It pretty much covers advertising direct email related stuff. Plus you can advertise to billions using our advertising direct email tools.

Come and check it out if you get time :-)

11/07/2005 03:02:00 PM  
Anonymous Anonymous said...

And A Link Back To Your Web Site Excite You?

11/08/2005 09:26:00 AM  
Anonymous real traffic said...

I got my visitors from www.dreamry.com and am glad I did! I actually got sales! Yay!

11/19/2005 10:06:00 PM  
Anonymous fine thin hair said...

black mold exposureblack mold symptoms of exposurewrought iron garden gatesiron garden gates find them herefine thin hair hairstylessearch hair styles for fine thin hairnight vision binocularsbuy night vision binocularslipitor reactionslipitor allergic reactionsluxury beach resort in the philippines

afordable beach resorts in the philippineshomeopathy for eczema.baby eczema.save big with great mineral makeup bargainsmineral makeup wholesalersprodam iphone Apple prodam iphone prahacect iphone manualmanual for P 168 iphonefero 52 binocularsnight vision Fero 52 binocularsThe best night vision binoculars here

night vision binoculars bargainsfree photo albums computer programsfree software to make photo albumsfree tax formsprintable tax forms for free craftmatic air bedcraftmatic air bed adjustable info hereboyd air bedboyd night air bed lowest pricefind air beds in wisconsinbest air beds in wisconsincloud air beds

best cloud inflatable air bedssealy air beds portableportables air bedsrv luggage racksaluminum made rv luggage racksair bed raisedbest form raised air bedsaircraft support equipmentsbest support equipments for aircraftsbed air informercialsbest informercials bed airmattress sized air beds

bestair bed mattress antique doorknobsantique doorknob identification tipsdvd player troubleshootingtroubleshooting with the dvd playerflat panel television lcd vs plasmaflat panel lcd television versus plasma pic the bestThe causes of economic recessionwhat are the causes of economic recessionadjustable bed air foam The best bed air foam

hoof prints antique equestrian printsantique hoof prints equestrian printsBuy air bedadjustablebuy the best adjustable air bedsair beds canadian storesCanadian stores for air beds

migraine causemigraine treatments floridaflorida headache clinicdrying dessicantair drying dessicantdessicant air dryerpediatric asthmaasthma specialistasthma children specialistcarpet cleaning dallas txcarpet cleaners dallascarpet cleaning dallas

vero beach vacationvero beach vacationsbeach vacation homes veroms beach vacationsms beach vacationms beach condosmaui beach vacationmaui beach vacationsmaui beach clubbeach vacationsyour beach vacationscheap beach vacations

bob hairstylebob haircutsbob layeredpob hairstylebobbedclassic bobCare for Curly HairTips for Curly Haircurly hair12r 22.5 best pricetires truck bustires 12r 22.5

7/24/2008 08:30:00 PM  

Post a Comment

<< Home