Language Selection

English French German Italian Portuguese Spanish

Beware How You Google

Filed under

A simple misspelling of Google's domain name could lead to a Web surfer's worst nightmare.

In a new twist to the old practice of "typosquatting," virus writers have registered a slight variation of Google Inc.'s popular search-engine site to take advantage of any users who botch the spelling of the URL.

The malicious site,, is infested with Trojan droppers, downloaders, backdoors and spyware, and an unsuspecting user only has to visit the page to be at risk of computer hijack attacks, according to a warning from Finnish anti-virus vendor F-Secure Corp.

When is opened in a browser, two pop-up windows are immediately launched with redirects to third-party sites loaded with scripts. One of the sites,, downloads and runs a "pop.chm" file, and the other,, downloads and runs a "ddfs.chm" file, F-Secure said.

"Both files are downloaded using exploits and they contain exploits themselves to run embedded executable files. One of the Web pages of the '' website downloads a file named 'pic10.jpg' using an exploit. This JPG file is actually an executable that replaces [the] Windows Media Player application," the warning reads.

The typosquatters also launch a steady stream of pop-up Web pages with different .exe files.

One batch of exploits loads a malware package that includes two backdoors, two Trojan droppers, a proxy Trojan, a spying Trojan and a Trojan downloader.

It is not yet clear if the attack vector takes advantage of an unpatched version of Microsoft Corp.'s Internet Explorer. Redmond officials could not be reached for comment.

Full Story.

More in Tux Machines

Android Leftovers

Leftovers: OSS

  • Clasp 0.4 -- Lisp Over LLVM -- Generates Code 200x Faster
    Clasp is a Common Lisp compiler based on LLVM that also provies seamless interoperation with C++ libraries.
  • Bulgarian ‘Future is Code’ school project ongoing
    Bulgaria’s ‘Future is Code’ initiative - where volunteers visit schools to introduce students and teachers to software development - which started in April, is continuing at least until the end of this month. The project has already introduced a handful of schools to open source. The volunteer-led project is supported by Bulgaria’s Ministry of Education.
  • Why viral licensing is a ghost
    According to an historical and widely shared distinction, present on Wikipedia and generally supported by too many free software advocates including some lawyers, “Strong copyleft” (sometimes renamed “viral licensing”) refers to licences governing a copyrighted work to the extent that their copyleft provisions can be efficiently imposed on all kinds of derived works, including linked works: the same copyleft licence becomes applicable to the combination. At the contrary, "Weak copyleft" would refer to licenses (that are generally used for the creation of software libraries) where not all derived works inherit the copyleft license, depending on the manner in which it was derived: copies and changes to the covered software itself become subject to the copyleft provisions of such a license, but not the software that links to it. This allows programs covered by any license (even proprietary) to be compiled and linked against copylefted libraries such as glibc (the GNU project's implementation of the C standard library), and then redistributed without any re-licensing required.
  • The Current State Of Pyston As An Open-Source, High Performance Python
    A status update concerning the Dropbox-sponsored Pyston project was presented earlier this month. A status update on the open-source Python high-performance JIT project was shared at a Pyston meet-up two weeks ago. For those interested, the Pyston blog shared today that this interesting video has now been uploaded.
  • Apple’s Swift iOS Programming Language Could Soon Be in Data Centers
  • Apple’s Swift programming language heads to the data centre
  • Server-Side Swift Unveiled: It's Perfect

today's howtos

Ubuntu 16.04 LTS (Xenial Xerus) Will Be Powered by Linux Kernel 4.4 LTS

The Ubuntu developers have published a new iteration of the Ubuntu Kernel Team Weekly Newsletter to inform all users of the world's most popular free operating system about the latest work done on the kernel packages of Ubuntu 16.04 LTS. Read more