RSSGoogle?s DoubleClick as virus carrier
Feb 26
Spyware antispyware-com, copyright, double, feedback, google, home, open-source, polls, polls-archive, security, september-2007, source, Spyware, spyware-malware, spyware-news, threat-database, Uncategorized, user, vista No Comments
As always, exercise caution when following advertisements.
So says PC World in a post saying eWeek.com was infiltrated by hackers using Google’s DoubleClick banner ads as a vehicle.
“Websense caught the malicious coding and published its results, which spurred eWeek to scour its code and remove all phony advertisements,” says the story, going on:
The pest, named Anti-Virus-1, is complicated and smart. The advertisements are for antivirus software, and when a user clicked on them, the ads redirect to a pornography Website through a series of iframes. Then a PDF pops up loaded with evil code, exploiting a weakness currently festering in the Adobe systems; or the file index.php redirects to the rogue ad server. The server places a file named “winratit.exe” into the user’s temporary files folder and stays there without any user interaction.
eWeek may not be the first popular Website to be attacked, the story adds.
Read more from the original source:
Google?s DoubleClick as virus carrier
