Posted 12/29/08 at 02:26:42 PM by Pulkit Chandna
An anonymous blackhat hacker is unabashedly exploiting an unattended vulnerability in URL redirect notifications to redirect internet users to malicious websites. As most websites, including the major ones, merely issue a notification to users that they are being redirected to another URL without scrutinizing that particular website, users remain sitting ducks to such attacks.
The nefarious attacker has gone a step further by employing SEO techniques to increase the standing of his spyware-bearing websites with search engines. Security analyst Gary Warner says that the threat can be rooted out, if redirects are tempered to only accept referrals from verified websites. However, he expects the threat to persist due to regulatory inaction.
Image Credit: Enor
Links:
[1] http://www.maximumpc.com/user/opulent_rigs_0
[2] http://arstechnica.com/news.ars/post/20081224-url-redirects-open-scareware-loophole.html
[3] http://www.pcworld.com/article/156010/fake_antivirus_peddlers_helped_by_microsoft_irs.html?tk=rss_news
[4] http://www.maximumpc.com/article/news/eset_threat_report_dramatic_upsurge_gaming_malware_gangs_target_second_life
[5] http://www.maximumpc.com/article/news/rare_malware_only_targets_firefox
[6] http://www.maximumpc.com/article/malware_pushers_have_no_respect_for_the_dead_and_the_best_of_the_best_windows_blog_posts_of_2007
Comments
Print
Email
