Wednesday, November 28, 2007

Click Fraud, Malware, and Google Terrain

Back again. Interesting things I have seen:

Malware via search results: Sunbelt Software reports of web pages that " tens of thousands of individual pages that have been meticulously created with the goal of obtaining high search engine ranking. Just about any search term you can think of can be found in these pages."

The goal is to create click-through revenue. More info here, including screen shots:
http://sunbeltblog.blogspot.com/2007/11/malware-redirects-aftermath_27.html

And if you go to those search pages, they will try to install some additional malware that will silently send 'clicks' to web sites that they get revenue from. It uses an old 'iframe' vulnerability that was patched several months ago.

Google Maps now has a terrain feature, which is pretty cool to look at (assuming that you live in an area with actual terrain. Go to maps.google.com, enter an address, then click on the "Terrain" button on the upper-right corner of the screen. Good visual implementation to help you get "the lay of the land".

If you have Apple's QuickTime installed, you better get updated. Active vulnerabilities there that can be exploited by viewing a evil video.

Lots of vulns out there; update everything early and often, and be careful where you click.

0 Comments:

Post a Comment

<< Home