Language Selection

English French German Italian Portuguese Spanish

Beware How You Google

Filed under

A simple misspelling of Google's domain name could lead to a Web surfer's worst nightmare.

In a new twist to the old practice of "typosquatting," virus writers have registered a slight variation of Google Inc.'s popular search-engine site to take advantage of any users who botch the spelling of the URL.

The malicious site,, is infested with Trojan droppers, downloaders, backdoors and spyware, and an unsuspecting user only has to visit the page to be at risk of computer hijack attacks, according to a warning from Finnish anti-virus vendor F-Secure Corp.

When is opened in a browser, two pop-up windows are immediately launched with redirects to third-party sites loaded with scripts. One of the sites,, downloads and runs a "pop.chm" file, and the other,, downloads and runs a "ddfs.chm" file, F-Secure said.

"Both files are downloaded using exploits and they contain exploits themselves to run embedded executable files. One of the Web pages of the '' website downloads a file named 'pic10.jpg' using an exploit. This JPG file is actually an executable that replaces [the] Windows Media Player application," the warning reads.

The typosquatters also launch a steady stream of pop-up Web pages with different .exe files.

One batch of exploits loads a malware package that includes two backdoors, two Trojan droppers, a proxy Trojan, a spying Trojan and a Trojan downloader.

It is not yet clear if the attack vector takes advantage of an unpatched version of Microsoft Corp.'s Internet Explorer. Redmond officials could not be reached for comment.

Full Story.

More in Tux Machines

First Ubuntu Touch Images Based on Ubuntu 16.04 LTS (Xenial Xerus) Are Now Live

Just a few moments ago, we were notified by Łukasz Zemczak from Canonical about the latest work done by the Ubuntu Touch developers for the upcoming OTA-9 software update for Ubuntu Phones. Read more

5 open-source alternatives to Slack

Here are five full-featured Slack alternatives — tools that go beyond IRC, in other words — that are open-source software, which means you can download it and run it on whatever server you want. That implies that you’re in charge of security, for better or worse, instead of, say, Slack. Read more

FFmpeg 2.8.3 "Feynman" Released, It's Now the Latest Stable FFmpeg Version

Earlier today, November 27, FFmpeg, the leading multimedia framework for Linux kernel-based operating systems has received a new maintenance release, version 2.8.3, which updates many of the project's core components. Read more

Tumbleweed changes fonts, Leap gets several updates

Tumbleweed had one snapshot so far this week that brought more appeal to users of openSUSE. Snapshot 20151123 changed fonts for openSUSE. The terminal font changed to Adobe Code Pro and Roboto was also added as the default font. Read more