Security researchers have discovered an attack aimed at would-be visitors to Google.com, one that attempts to download malicious programs onto the computers of people who simply mistype the search giant's Web address.
According to security specialist F-Secure, unsuspecting Web surfers may be bombarded with various types of Trojan horse threats, spyware and backdoors when they go to "Googkle.com." The scheme is meant to take advantage of sloppy or hurried typists, given that on most keyboards the letter "k" key sits next to the "l" needed to type "Google."
Google representatives said the company had no comment on the matter for the time being.
In the past, the company appears to have made moves to protect its users against mistyping errors. If a person puts an extra "o" in Google's URL, they are simply redirected to the company's homepage. On the other hand, if someone mistakenly adds a fourth "o" to Google, they are directed to USseek.com, a Web portal that offers pop-up advertising for an online casino.
In an advisory, F-Secure strongly advises people not to go to Googkle.com. People who do so will see two pop-ups linked to Web sites that install the Trojan programs. One of the programs is a phishing-style Trojan that attempts to garner individuals' online banking information, while another drops phony antivirus alerts on the victim's desktop that attempt to lure people to other infected Web sites.
While relatively low-tech in terms of its social engineering, the URL mistype attack is an approach that has long been incorporated by many different kinds of Internet opportunists, from legitimate companies trying to steal traffic from their rivals or simply piggyback on the success of larger companies, to criminals looking to misrepresent themselves and trick consumers into handing over personal data.
In one of the most famous instances of URL deception, the site hosted at Whitehouse.com for several years was an advertisement for pornography, not a link to the office of the president, whose official site is Whitehouse.gov.
Or more specifically that any OS can suffer the effects of a trojan because of the nature of how they work by tricking the user. Heres a thought. Read up and understand what you are posting about before you shoot off your mouth.
just install Firefox. The reason why there's no trojans for macs is because trojans exist to get people's information - so you need a large number of USERS. Oh and they need to have bank accounts.
I find this statement extremely amusing! Would you consider 25 Million users a large number? Viruses are written by mainly teenage kids... are they brilliant... or just copying and pasting readily available code and distributing it.. In addition, wouldn't you think it would be a major accomplishment to write a virus for a UNIX based OS? Perhaps its too difficult... why waste your time failing when a simple web page could infect a windows os. Keep thinking that way!!!
There's a difference between an OS and a browser, did you hear about that? It's not Windows that gets infected, but rather IE, and only if you let it. There are security holes and viruses for the Mac, it's just nobody bothers to distribute them, because they won't run on PC's. Duhhh
Perhaps, but IE is so integrated into the Windows OS that infecting IE can practically devistate the system. Using a browser like Firefox (which is separate from the OS) or any browser in Mac OS X, all of which are separate from the OS, will limit the chance of any virus/spyware/malware being able to do any real damage to your OS.
However, as secure as Mac OS X is, it still won't protect users from phishing schemes. That protection falls solely on the user.
Right or wrong, you will always be on the losing side of the argument when you accuse an overwhelming majority of the people of being "idiots." Lets leave the blame on the hackers, not the users. I won't call people "idiots" for using standard locks on their doors.... even though they can be easily picked.
For XPI-based malware. Then, I'll post a comment saying "Nope. Using Opera", with the content being "Oh you are talking about the idiots still using Firefux. Sorry."
so long as it helps rid the internet of people who can't spell. especially a simple word like google. now if the website in question was electroencephalogram.com or floccinaucinihilipilification.net then i suppose i'd see it as a problem
(Warning, the following statement is full of sarcasm) And right after this site gets rid of the people who can't spell, maybe they can move on to the people who don't use proper capitalization and spell everything in lowercase! Then it could move on to other grammatical errors people make weeding them out little by little until you can't make any errors in typing a URL without getting a virus. Because everyone knows that people who can't spell is such a HUGE plague terrorizing everyone on the internet. (End of sarcasm)
Anyways, the thought of supporting someone who puts viruses on people's computers just because they happen to type a 'k' in the name of google, or any other grammar errors in any website, is completely retarded.
I donīt get it. How is this even legal? and if so why do we let stuff like this exist! I am so sick and tired of having to deal with viruses,trojans and spam. There should be heavy laws against this stuff with serious jail time!!! Everyone complains, you see it on CNN, but the end result is nothing. Why do we give free reign to these theives??
Viri and worms are easy to avoid. Use a good AV program, and don't use IE.
Spyware is easy to avoid, Use a good spyware blocker and don't use IE.
Spam is easy to avoid, don't spread your email address around, and use a alternate address if you need to give it to some site and think you might get spammed. A hotmail account is perfect for this, what else would anyone use hotmail for besides a junk repository?
Phishing scams are easy to avoid. Don't be stupid.
I use Firefox, AVG anti-virus, Zone-Alarm pro, Spybots tea timer, and scan once a week with spybot and Ad-aware. I am careful who gets my address, even cnet only has my spam address. I haven't got any spyware in months, I have never gotten a virus or worm, and haven't seen a bit of spam in well over a year.
Of course, all this effort should not be necessary, I don't have to worry about any of this on my linux install. No, don't bother trying to claim that linux is only safer because it isn't 'popular', that myth has been debunked countless times and will only make you look like an idiot.
First off, the internet isn't in just the US, it is around the world. Therefore, it is subject to not only one set of laws, but many. Even if the US tried to get these trojan horse makers and make them pay for the damage they cause to the thousands of computers each year, all they have to do is move there server to a country to a place with laxer laws, hookup there server to the internet, and they are back online and out of the grasp of the US legal system. It is a shame, but thats life. Now, if only we can get the UN to try to come up with an "Internet Treaty" that allows the home country of users who get damaged by trojan horses to be able to go after the trjan horse makers. That would stop things. Besides, I don't use Internet Exploder (I mean Explorer) anymore unless I am downloading something I want to specifically download from either CNET or another source.
Google creates an animated doodle that features a boy, a girl, Google's search engine, and a jump rope. But might there be darker, more analytical, more troubling interpretations to this tale?
The Silicon Valley online payments startup grew by 1,000 percent last year and is hopeful it can repeat that level of growth this year. To do that, it's had to move away from its early friends-and-family roots and embrace small businesses.
Chamtech's spray-on antenna uses a nano material to provide a low-power boost to antenna range. The wireless-in-a-can product may some day bring an end to unsightly cell towers.
EnerG2 opens a plant to make an engineered carbon that will improve performance of energy storage devices and make storage for start-stop hybrid cars less expensive.
Cut the Rope on Internet Explorer 9!
Million users a large number? Viruses are written by mainly
teenage kids... are they brilliant... or just copying and pasting
readily available code and distributing it.. In addition, wouldn't
you think it would be a major accomplishment to write a virus
for a UNIX based OS? Perhaps its too difficult... why waste your
time failing when a simple web page could infect a windows os.
Keep thinking that way!!!
infecting IE can practically devistate the system. Using a
browser like Firefox (which is separate from the OS) or any
browser in Mac OS X, all of which are separate from the OS, will
limit the chance of any virus/spyware/malware being able to do
any real damage to your OS.
However, as secure as Mac OS X is, it still won't protect users
from phishing schemes. That protection falls solely on the user.
And right after this site gets rid of the people who can't spell, maybe they can move on to the people who don't use proper capitalization and spell everything in lowercase! Then it could move on to other grammatical errors people make weeding them out little by little until you can't make any errors in typing a URL without getting a virus. Because everyone knows that people who can't spell is such a HUGE plague terrorizing everyone on the internet.
(End of sarcasm)
Anyways, the thought of supporting someone who puts viruses on people's computers just because they happen to type a 'k' in the name of google, or any other grammar errors in any website, is completely retarded.
Remember, don't judge a book by its cover.
Spyware is easy to avoid, Use a good spyware blocker and don't use IE.
Spam is easy to avoid, don't spread your email address around, and use a alternate address if you need to give it to some site and think you might get spammed. A hotmail account is perfect for this, what else would anyone use hotmail for besides a junk repository?
Phishing scams are easy to avoid. Don't be stupid.
I use Firefox, AVG anti-virus, Zone-Alarm pro, Spybots tea timer, and scan once a week with spybot and Ad-aware. I am careful who gets my address, even cnet only has my spam address. I haven't got any spyware in months, I have never gotten a virus or worm, and haven't seen a bit of spam in well over a year.
Of course, all this effort should not be necessary, I don't have to worry about any of this on my linux install. No, don't bother trying to claim that linux is only safer because it isn't 'popular', that myth has been debunked countless times and will only make you look like an idiot.