Rougue er all

[DiskDoctor]

The website is infected with pharming attacks: As soon as you browse the site the malicious code will attempt to take over your system by using multitudes of different methods, including infected swf and pdf documents abusing vulnerabilities in Flash player and Adobe Acrobat.

The malicious files are hosted in chinese (.cn) domains.

It is quite likely that amigann is innocent victim here aswell, and the site has been hacked. I'll investigate further soon. Meanwhile, I am urging caution when browsing the site. Even better, avoid the site altogether.

update1:

As far as I can tell the malware comes from malicious google ads. Suspicious URLs look like:

Code: [Select]


http://****mail.org/licky/etChunksFrom.swf
http://****anag.cn/rf/fromFactLooks.swf
http://****ci.cn/redirect/include/spl.php?stat=Linux|Mozilla%205.0|FI|Mozilla


Man, this is ill.

How in the hell could Google, Inc. help in delivering malicious content to the users??  Do they have a disclaimer in their ad argreement that they aren't responsible for the content?  Is this LEGALLY correct?

You know G Inc is some sort of a virgin in an IT world.  They made cool search, cool video storage (by buying it), coll ajax mail, cool cellphones, browser, but unlike Microsoft or Apple, no one ever sued them yet.  

Maybe it is high time someone did then?

After reading this, I would be first person todo so.

[Piru]

How in the hell could Google, Inc. help in delivering malicious content to the users?

Google isn't, directly.

The ads are such that they have either time or IP address (or something else) triggering the extra content. At the time of the ad purchase or when google looks at it, it appears perfectly legit. Only after the trigger fires the malware is activated. I've seen this trick being used quite a lot lately. Many high profile sites have been hit.

There's very little google can do to fight against such attacks.

Maybe it is high time someone did then?

I don't know what that would accomplish really.

Users can fight against these attacks by making sure that their antivirus, operating system and applications are always kept up to date. Windows users should install Secunia Personal Software Inspector.

[DiskDoctor]

Google isn't, directly.

The ads are such that they have either time or IP address (or something else) triggering the extra content. At the time of the ad purchase or when google looks at it, it appears perfectly legit. Only after the trigger fires the malware is activated. I've seen this trick being used quite a lot lately. Many high profile sites have been hit.

There's very little google can do to fight against such attacks.

I don't know what that would accomplish really.

Someone's legal responsitivity for someone else's loss.

You know my type.  Help in malware distribution is a crime I guess, both here, in US, name it.

Technical limitations MUST NOT drive some action's legal justification.  You do something wrong and you cannot fix it, LEAVE IT OR TAKE RESPONSITIVITY.

[Piru]

Someone's legal responsitivity for someone else's loss.

You know my type.  Help in malware distribution is a crime I guess, both here, in US, name it.

So, I guess this means that if someone hacks your computer and uses it to distribute malware, you should be held accountable for all damages?

IMHO google is equally a victim here.

[DiskDoctor]

So, I guess this means that if someone hacks your computer and uses it to distribute malware, you should be held accountable for all damages?

IMHO google is equally a victim here.

It depends.  If you conciously left your notebook without any password in some public place, then YOU.

Google should fix their security procedures; limit technologies, rise prices and store&check all served content etc. IMAO.

[DiskDoctor]

@Piru

OK but this is off topic.  I'll just leave the matter and have discussed with someone else.

Actually my temper here comes from the fact that this October I start PG IP Law studies So I kindda like those issues :lol:

[Tension]

The website is infected with pharming attacks: As soon as you browse the site the malicious code will attempt to take over your system by using multitudes of different methods, including infected swf and pdf documents abusing vulnerabilities in Flash player and Adobe Acrobat.

The malicious files are hosted in chinese (.cn) domains.

It is quite likely that amigann is innocent victim here aswell, and the site has been hacked. I'll investigate further soon. Meanwhile, I am urging caution when browsing the site. Even better, avoid the site altogether.

update1:

As far as I can tell the malware comes from malicious google ads. Suspicious URLs look like:

Code: [Select]


http://****mail.org/licky/etChunksFrom.swf
http://****anag.cn/rf/fromFactLooks.swf
http://****ci.cn/redirect/include/spl.php?stat=Linux|Mozilla%205.0|FI|Mozilla


I wondered why my acrobat reader was going mental!!