Language Selection

English French German Italian Portuguese Spanish

Beware How You Google

Filed under
Web

A simple misspelling of Google's domain name could lead to a Web surfer's worst nightmare.

In a new twist to the old practice of "typosquatting," virus writers have registered a slight variation of Google Inc.'s popular search-engine site to take advantage of any users who botch the spelling of the google.com URL.

The malicious site, googkle.com, is infested with Trojan droppers, downloaders, backdoors and spyware, and an unsuspecting user only has to visit the page to be at risk of computer hijack attacks, according to a warning from Finnish anti-virus vendor F-Secure Corp.

When googkle.com is opened in a browser, two pop-up windows are immediately launched with redirects to third-party sites loaded with scripts. One of the sites, ntsearch.com, downloads and runs a "pop.chm" file, and the other, toolbarpartner.com, downloads and runs a "ddfs.chm" file, F-Secure said.

"Both files are downloaded using exploits and they contain exploits themselves to run embedded executable files. One of the Web pages of the 'toolbarpartner.com' website downloads a file named 'pic10.jpg' using an exploit. This JPG file is actually an executable that replaces [the] Windows Media Player application," the warning reads.

The typosquatters also launch a steady stream of pop-up Web pages with different .exe files.

One batch of exploits loads a malware package that includes two backdoors, two Trojan droppers, a proxy Trojan, a spying Trojan and a Trojan downloader.

It is not yet clear if the attack vector takes advantage of an unpatched version of Microsoft Corp.'s Internet Explorer. Redmond officials could not be reached for comment.

Full Story.

More in Tux Machines

Top 5 Open Source Email Clients For Linux


Top 4 free, open source email client for linux

All of us have been very addictive to check our email accounts. Wherever we are or whoever is talking to us does not matter, we want to be notified whenever any email arrives to our any accounts. It is not possible though with web app for which you need to open your browser and log in to check new emails. So here comes email clients very handy. I am reviewing Top 4 email clients that are free,open source and easy to use. 
 

Read At LinuxAndUbuntu

Ubuntu 15.04 (Vivid Vervet) Now Based on Linux Kernel 3.19.2

Ubuntu 15.04 (Vivid Vervet) is almost here and the developers are mostly done with the development, but the kernel team still has some time for various updates. In fact, the Linux kernel has been updated to a newer version. Read more

Leftovers: KDE

South-Tyrol finances open source eInvoicing tool

Proxy FatturaPA [1], an eInvoicing software solution co-financed by the Autonomous Province of South-Tyrol (Italy), is made public using the GPLv3 free software licence. The software is developed by Link.it, a IT company based in Pisa. Read more