FanPost

Virus Alert tied to March Madness

FYI only to the GSoM community:

Websense Security Labs(TM) has received reports that searching for March Madness-related terms in Google's search engine returns results that lead to rogue antivirus software. March Madness is the term given to an elimination tournament held each spring featuring college basketball teams in the United States.

With only a few days left before the tournament starts, if a user searches for popular March Madness-related terms in Google, malicious URLs as high as the first result are returned. Search terms that currently exist within the Top 10 of Google's Hot Trends (the most popular search results) return these malicious URLs.

If a user clicks through these links (such as hxxp://[removed].de/news/nit_bracket_2009.html) they are redirected, via Javascript code, to a Web site advising the user that their machine is infected. The rogue AV Web site encourages the user to install a file called install.exe.

The technique of search engine optimization (SEO) poisoning pushes the infected URLs to the top of the search results, to increase the likelihood of a user clicking through to the malicious link.

Ask.com is also confirmed to be affected in this way. Other search engines may be affected in a similar manner.

This FanPost is a submission from a member of the mighty Golden State of Mind community. While we're all here to throw up that W, these words do not necessarily reflect the views of the GSoM Crew. Still, chances are the preceding post is Unstoppable Baby!

X
Log In Sign Up

forgot?
Log In Sign Up

Forgot password?

We'll email you a reset link.

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Forgot password?

Try another email?

Almost done,

Join Golden State Of Mind

You must be a member of Golden State Of Mind to participate.

We have our own Community Guidelines at Golden State Of Mind. You should read them.

Join Golden State Of Mind

You must be a member of Golden State Of Mind to participate.

We have our own Community Guidelines at Golden State Of Mind. You should read them.

Spinner

Authenticating

Great!

Choose an available username to complete sign up.

In order to provide our users with a better overall experience, we ask for more information from Facebook when using it to login so that we can learn more about our audience and provide you with the best possible experience. We do not store specific user data and the sharing of it is not required to login with Facebook.

tracking_pixel_9347_tracker