Hackers hijack Google AdWords

phillip Active Member

Messages:: 727

Likes Received:: 14

Best Answers:: 0

Trophy Points:: 60

#1

http://technology.timesonline.co.uk/tol/news/tech_and_web/article1714656.ece

Criminals have been hijacking sponsored links to attempt to spread malicious code, search company says
Jonathan Richards

Computer users were warned of the potential hazards of Google today after the company admitted that criminals had hijacked links displayed in some lists of search results and attempted to install viruses on users' machines.

It was unclear how many people were affected by the attack, which targeted the sponsored links that appear on the right hand side of a page and involved the user being sent to a malicious website before being redirected to their desired destination.

Google would not say which search terms were involved, but according to reports, links associated with some 20 terms had to be dismantled, including the "Better Business Bureau", a US-based consumer organisation similar to Which?.

The offending links were shut down as soon as the problem was discovered on Tuesday, Google said, but the attack will cast doubt on the security of AdWords, the system the company uses to sell the advertisements which make up the bulk of its revenues.

AdWords allows companies to bid to have their link displayed prominently alongside the results thrown up by a particular search term.

In the attack, criminals bought links that appeared to be genuinely associated with search terms but which diverted users to a malicious site that attempted to install malware on their computers.

"The analogy would be if you were Reebok, you'd bid on the keyword 'Nike' and then place an ad that appeared to be a link to Nike but which sent the person searching somewhere else first," a Google spokesman said.

The company which discovered the threat, Exploit Prevention Labs, said that earlier this month it had run a Google search on the phrase "how to start a business".

The top sponsored link appeared to be from AllBusiness.com, a legitimate small business consultancy based in San Francisco, but the hyperlink actually led to a site that attempted to install a password-stealing program known as a "key-logger" on the user's PC.

"This discovery highlights problems facing all sponsored search vendors - how to determine the legitimacy of any individual advertiser, and how to determine whether a redirected link is being used legitimately," Exploit Prevention Labs said.

Computer security experts said that the attack, which was similar to one in 2005 that also targeted AdWords, appeared to be isolated, and affected only users of Windows XP who had not updated the anti-virus software on their machines.

In a statement, Google confirmed that its system had been infiltrated, saying: "This is an issue weâ€™ve taken very seriously and will continue to monitor. We are evaluating our systems to ensure that the appropriate measures are in place to block future attempts."

Graham Cluley, a consultant at the security firm Sophos, said that the incident was indicative of a trend among virus-writers to use websites, rather than e-mail attachments, to spread malicious code.

"For many people Google is the internet, and just as in the past Microsoft's Internet Explorer and Outlook have been targeted, so too is Google becoming increasingly attractive for virus writers to try to exploit," he said.

Google recently reported that its first-quarter profits had risen by 69 per cent to $1 billion (Â£500 million).
Click to expand...

Heres a image from another site:

phillip, Apr 28, 2007 IP

patco Well-Known Member

Messages:: 2,035

Likes Received:: 47

Best Answers:: 17

Trophy Points:: 100

#2

Hackers!!!!Why is one person Hacker??

patco, Apr 28, 2007 IP

pulikuttann Banned

Messages:: 1,839

Likes Received:: 40

Best Answers:: 0

Trophy Points:: 0

#3

Hackers are the persons who have great knowledge in Computers and Networks.
They do this because of many reasons.
Some do for fun while others do it for some financial intention.

pulikuttann, Apr 28, 2007 IP

xharrisonx Peon

Messages:: 524

Likes Received:: 14

Best Answers:: 0

Trophy Points:: 0

#4

Gah,
someone was pwnndddd

xharrisonx, Apr 29, 2007 IP

Nneel Peon

Messages:: 16

Likes Received:: 0

Best Answers:: 0

Trophy Points:: 0

#5

interesting news....

Nneel, Apr 29, 2007 IP

goscript Prominent Member

Messages:: 2,753

Likes Received:: 306

Best Answers:: 0

Trophy Points:: 315

#6

This happens all the time. Sponsored ads linking to "worm pages", adwords it is full of this pages. Even if Google checks the page before approving the sponsored link, the "hijacker" place an innocent looking page at first, and after the link it is approved , they replace it with the malicious code. Google might fight against them, but the "hijackers" fight hard too.

goscript, Apr 29, 2007 IP

lorylxw Peon

Messages:: 176

Likes Received:: 1

Best Answers:: 0

Trophy Points:: 0

#7

I'm sorry to hear that

lorylxw, Apr 29, 2007 IP

tradeya Notable Member

Messages:: 5,729

Likes Received:: 275

Best Answers:: 0

Trophy Points:: 230

#8

dont worry google will spent like mils$ to shut that hacker down

tradeya, Apr 29, 2007 IP

goscript Prominent Member

Messages:: 2,753

Likes Received:: 306

Best Answers:: 0

Trophy Points:: 315

#9

tradeya said: ↑

dont worry google will spent like mils$ to shut that hacker down
Click to expand...

no they wont... all they do is disable his ads. It's not google being hacked, is people who get hacked.

goscript, Apr 29, 2007 IP

Log in or Sign up

Hackers hijack Google AdWords

phillip Active Member

patco Well-Known Member

pulikuttann Banned

xharrisonx Peon

Nneel Peon

goscript Prominent Member

lorylxw Peon

tradeya Notable Member

goscript Prominent Member

Useful Searches