Language Selection

English French German Italian Portuguese Spanish

Beware How You Google

Filed under
Web

A simple misspelling of Google's domain name could lead to a Web surfer's worst nightmare.

In a new twist to the old practice of "typosquatting," virus writers have registered a slight variation of Google Inc.'s popular search-engine site to take advantage of any users who botch the spelling of the google.com URL.

The malicious site, googkle.com, is infested with Trojan droppers, downloaders, backdoors and spyware, and an unsuspecting user only has to visit the page to be at risk of computer hijack attacks, according to a warning from Finnish anti-virus vendor F-Secure Corp.

When googkle.com is opened in a browser, two pop-up windows are immediately launched with redirects to third-party sites loaded with scripts. One of the sites, ntsearch.com, downloads and runs a "pop.chm" file, and the other, toolbarpartner.com, downloads and runs a "ddfs.chm" file, F-Secure said.

"Both files are downloaded using exploits and they contain exploits themselves to run embedded executable files. One of the Web pages of the 'toolbarpartner.com' website downloads a file named 'pic10.jpg' using an exploit. This JPG file is actually an executable that replaces [the] Windows Media Player application," the warning reads.

The typosquatters also launch a steady stream of pop-up Web pages with different .exe files.

One batch of exploits loads a malware package that includes two backdoors, two Trojan droppers, a proxy Trojan, a spying Trojan and a Trojan downloader.

It is not yet clear if the attack vector takes advantage of an unpatched version of Microsoft Corp.'s Internet Explorer. Redmond officials could not be reached for comment.

Full Story.

More in Tux Machines

Leftovers: Software

  • Ekiga 5 – Progress Report
    Ekiga 5 has progressed a lot lately. OpenHUB is reportin a High Activity for the project. The main reason behind this is that I am again dedicating much of my spare time to the project. Unfortunately, we are again facing a lack of contributions. Most probably (among others) because the project has been silent during several years.
  • Calibre Gets a New Tool to Better Edit eBooks
    The Calibre eBook reader, editor, and library management software has been upgraded to version 2.17 and is now available for download. The developer has only implemented a couple of new features, but it's really worth the update if you are using this application to edit eBooks.
  • More Windows Apps and Games Now Work with Wine 1.7.35, EA's Origin Included
    Wine 1.7.35 has been released and the developers have made a number of improvements for some of the core components and they've added support for more apps and games.

today's howtos

Leftovers: Gaming

  • Dying Light Action Survival Game Coming to Steam January 27
    Dying Light, a modern first-person survival horror game set in a world hit by plague, is now available for pre-purchase on Steam and will be available for download on January 27.
  • Dying Light FPS Has Been Confirmed for Linux, Zombies Galore
    Techland is preparing to launch Dying Light, a new FPS with amazing graphics and hordes of zombies. The developer has revealed that it will also have a Linux version, right from the start.
  • Dying Light Is Now Confirmed For Linux, Bring It On Techland
    Dying Light is now confirmed for Linux thanks to the announcement from the developers on the Steam store itself. The Linux icons show up on the store pages, and the game even has a steam coming soon banner on the home-page. Time to get seriously excited.
  • Star Traders: 4X Empires Strategy Game Now On Linux
  • 5 reasons Valve's Steam Machine dream is still very alive
    Steam Machines? More like has-been machines, am I right? Actually, no: while many people are giving Valve's PC-console-hybrids the cold shoulder, this gamer reckons they'll be worth the wait. I realise that I'm part of a shrinking group still backing Valve's SteamOS-powered Linux boxes, and it's not difficult to see why the hype around them has all but evaporated. Several controller-related delays, U-turns by seemingly committed hardware partners and a lack of news from the top has made many think that Valve is blowing hot air.

Android Leftovers