Google vs. Gumblar: Search Engine Abused in New Round of Stealthy Attacks

[ronjor]

By: Brian Prince
2009-05-14

A wave of Web site compromises is infecting users with malware that re-directs Google search results to malicious pages. The malware, which so far is targeting users of Internet Explorer, also steals FTP credentials and installs a backdoor.

Story

[innerpeace]

Thanks Ron.

Very interesting article. Some of the info was a little hard to follow but preventing the attacks should be easy enough for the home user.

According to ScanSafe, the stealthy malware is hitting computers via drive-by attacks leveraging PDF and Adobe Flash exploits.

Users are advised to make sure their patches from Adobe Systems are up-to-date.

Even more prevention techniqes/information can be found in this thread by member Rmus.

[ronjor]

preventing the attacks should be easy enough for the home user

I will agree with that only if home computer users are aware of patches for the programs on their computer and the knowledge that leaving operating systems unpatched can also lead to malware problems .

[innerpeace]

Originally Posted by ronjor

I will agree with that only if home computer users are aware of patches for the programs on their computer and the knowledge that leaving operating systems unpatched can also lead to malware problems .

Very true! That's why I often mention that folks visit the link in my signature to the Secunia site and run an online scan to see if their running a vulnerable operating system or programs. Whenever I perform maintenance on my relatives computers it's the 2nd thing I do after running ccleaner.

P.S. You and the other members/staff do a really good job of letting us know when vulnerabilities are found and patches are released. It's vital info for the security conscious .

[benton4]

Originally Posted by innerpeace

P.S. You and the other members/staff do a really good job of letting us know when vulnerabilities are found and patches are released. It's vital info for the security conscious .

Innerpeace,
you hit the nail right on the head. Hats off to those who share info/stories that help keep us safe and aware of current internet threats!!!