Re: Google security concern?
Daniel Wesemann <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
Empty Floatbag wrote: >Has anyone else noticed that some seemingly "normal" >searches on Google return completely unrelated sites >which attempt to compromise a system through the >browser? > > Yep, indeed I have noticed. Chasing malware, I've tracked quite a number of incidents back to a seemingly innocuous search that the user made in Google. I also concur with your observation that many of these sites appear to be hosted in Russia/Ukrania. Google Spamming is nothing new, though, and I doubt if these pages were deliberately added to Google in order to propagate an exploit. It seems to me rather that the pages were spammed into Google to toll their "virtues" (usually fleshtone pictures or mp3/software piracy), and that hosting the exploit is a "3rd party addition" to the site content as a by-product of sloppy security maintenance on these boxes. But I'm all for conspiracy theories :-), so if anybody can help to find ties between these sites and/or indications of deliberate Google spamming to propagate an exploit, I'm happy to join the hunt. -daniel gcia _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions