Attackers Use Google Image Search to Distribute Malware

[Bluedot]

Attackers are now using Google's (GOOG) image search to distributed malware, security experts say. Thousands of sites have reportedly been compromised by code injection--the malicious code redirects users to fake antivirus applications.
Internet Storm Center researcher Bojan Zdrnja writes that the attackers are mostly targeting Wordpress sites, and are injecting PHP code that generates pages with images based on highly-searched content. Google then indexes these pages, and the images show up on Google's image search.

Google says it is aware of the problem, and is making an effort to detect malicious pages. It would not detail its plans out of fear that attackers may adjust their methods to get around the company's efforts. Sinegubko is also in the process of developing an add-on for Firefox that will alert users to these links.
Efforts are already underway to protect Google users on the web search side: Google added alerts to potentially hacked sites in December of last year, and Google's Chrome browser blocks potentially dangerous downloads. For whatever reason, Google's image search remains unprotected.

More: Here

Page rated green by Avast! WebRep

[JayCub]

Thank you for posting the news Bluedot, im tired of reading about the fake anti virus as it's a pain if your unlucky enough to get caught out, i hope google have this sorted out.

[INDRANIL]

Thanks for the heads up .

[Newbie Comp user]

Thanks for this!
I found one while doing my school project
Good thing I didn't get infected thanks to MBAM
Funny enough... I nearly risked my laptop getting infected because of a school project. What is this cyber world coming into?!