• Subcribe to Our RSS Feed

Is it True That Google is Vulnerable to Malware ?

Aug 9, 2008 by     5 Comments    Posted under: Gooogle

Google Vulnerable ? Is this true that Google is Vulnerable to Malware attack ? I have read an article by Defcon A well-known researcher specializing in website security tha they have criticized safety on Google, arguing the world’s biggest search engine needlessly puts its millions of users at risk, But how  ?

The most devastating is the ability of Google gadgets to immediately redirect victims who log into iGoogle.com to a page under the control of an attacker. This creates a phishing hazard, particularly for less tech-savvy users who don’t know to check the browser bar. Even if they do, the bar shows up at gmodules.com, an address many mistakenly believe is safe because it is maintained by Google. ( Source )

They said that

Google gadgets make other attacks possible, including: the ability to:

  • carry out port scanning on a victim’s internal network to conduct surveillance
  • use cross-site request forgery techniques to force victim PCs to follow links to malicious sites (for instance, those that host child pornography) and
  • cause a victim’s browser to access a home router and change domain name system server addresses or other sensitive settings. ( Source )

Although Hansen CEO of secTheory and Stracener acknowledged that in-the-wild attacks that use Google gadgets are rare, but they said that’s likely to change. I believed that Google response to this matter should be address as soon as possible.

Well I rarely use Google Gadget 🙂

5 Comments + Add Comment

  • Hi!

    Sorry for posting this message as a comment, but this was the easiest way to contact you… I don’t mind if you delete it (actually, it would be a good idea… later you’ll see why 😉 ).

    I was an EntreCard user too a few weeks ago… when Learniacs.com was still a knowledge blog… you might remember it.

    I’d like to let you know about my new website which allows you to promote yourself as an expert and earn some money too… The new website is online for a couple of weeks now…

    Learniacs now allows you to become a trusted expert in your field and earn money directly into your Google AdSense account from the articles you publish. You can easily interact with other people and learn from other successful members.

    But this gets a lot more interesting when you bring new people to the system, because you also earn half of what they earn on their articles. And it doesn’t stop here. If your referrals manage to bring some new people to the system, you will also earn money from them and so on, for 10 levels deep.

    However you don’t have to bring new people to your network if you don’t want to. You can use the system for any of its features you like and without any restrictions. But, if you decide it would be a good idea to grow your network, the system provides very easy to use tools to invite others to join your network.

    There is no limit of how many articles you can publish, how many new people you can bring to the system or how much money you can earn! And you can write about absolutely any subject you like!

    The best thing about Learniacs is that people are helping each other so, if you register as my direct referral, you’ll have all my support. I’m willing to help you make money because your success is my success too. So, please, do not modify the following link if you decide to sign up: http://www.learniacs.com/ref/5 (it takes less than 30 seconds, trust me).

    Thank you for your time and see you there!
    Bogdan Ionescu

  • Thanks for sharing. Search engine optimization is indeed one of the most crucial areas in Internet marketing, it is a perfect bridge between technology and business.

  • Google is god.. All hale Google! hehehe 😉

    Jehzeel Laurentes last blog post..WordCamp Philippines Registration is now Closed!

  • ako i dont use it at all nga.. pero i know.. Google can fix everything 🙂 hehe… kahit ang pilipinas kayang kaya nya e fix pag gusto nya lang 😀

    Jehzeel Laurentes last blog post..WordCamp Philippines Registration is now Closed!

Got anything to say? Go ahead and leave a comment!

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>