April 27, 2005 8:51 AM PDT
Scheme preys on people who mistype 'Google.com'
- Related Stories
-
Google tests out blog ad service
April 26, 2005 -
Google search gets personal
April 20, 2005 -
Mozilla flaws could allow attacks, data access
April 18, 2005 -
Bigger phishes ready to spawn
April 13, 2005 -
Site-blocking worm carries phishing risk
April 11, 2005
According to security specialist F-Secure, unsuspecting Web surfers may be bombarded with various types of Trojan horse threats, spyware and backdoors when they go to "Googkle.com." The scheme is meant to take advantage of sloppy or hurried typists, given that on most keyboards the letter "k" key sits next to the "l" needed to type "Google."
Google representatives said the company had no comment on the matter for the time being.
In the past, the company appears to have made moves to protect its users against mistyping errors. If a person puts an extra "o" in Google's URL, they are simply redirected to the company's homepage. On the other hand, if someone mistakenly adds a fourth "o" to Google, they are directed to USseek.com, a Web portal that offers pop-up advertising for an online casino.
In an advisory, F-Secure strongly advises people not to go to Googkle.com. People who do so will see two pop-ups linked to Web sites that install the Trojan programs. One of the programs is a phishing-style Trojan that attempts to garner individuals' online banking information, while another drops phony antivirus alerts on the victim's desktop that attempt to lure people to other infected Web sites.
While relatively low-tech in terms of its social engineering, the URL mistype attack is an approach that has long been incorporated by many different kinds of Internet opportunists, from legitimate companies trying to steal traffic from their rivals or simply piggyback on the success of larger companies, to criminals looking to misrepresent themselves and trick consumers into handing over personal data.
In one of the most famous instances of URL deception, the site hosted at Whitehouse.com for several years was an advertisement for pornography, not a link to the office of the president, whose official site is Whitehouse.gov.
See more CNET content tagged:
trojan horse,
online banking,
F-Secure Corp.,
Google Inc.,
security
Remember, don't judge a book by its cover.
- Site is already down
-
by Gerald Quaglia
April 29, 2005 9:35 PM PDT
- Checked it out, with my mac of course!
-
Reply to this comment
-
-
See all 41 Comments >>