Wednesday, 15 June 2011

Mac security alert: scammers Swap Google Images for Malware

Seekerblog will be running a series of security alerts for Apple Macintosh users. Security blogger Brian Krebs has an excellent description of a nasty malware attack propagated through Google image search. If you read this carefully you will see how easily many users will be tricked into inviting malware into their computers (Mac or Windows).

A picture may be worth a thousand words, but a single tainted digital image may be worth thousands of dollars for computer crooks who are using weaknesses in Google’s Image Search to foist malicious software on unsuspecting surfers.

For several weeks, some readers have complained that clicking on Google Images search results directed them to Web pages that pushed rogue anti-virus scareware via misleading security alerts and warnings. On Wednesday, the SANS Internet Storm Center posted a blog entry saying they, too, were receiving reports of Google Image searches leading to fake anti-virus sites. According to SANS, the attackers have compromised an unknown number of sites with malicious scripts that create Web pages filled with the top search terms from Google Trends. The malicious scripts also fetch images from third-party sites and include them in the junk pages alongside the relevant search terms, so that the automatically generated Web page contains legitimate-looking content.

GOOGLE IMAGES