Phishing on Google’s Brand

Posted by Ken

New here? You may want to subscribe to my RSS feed. Thanks for visiting!

A report earlier this month described phisher’s using Google’s brand to trick users into installing a bogus Google toolbar. The method of communication was through IM and IRC networks.

Several goals are on the table. First, users are tricked into entering their credit card information. Second, a phony Google toolbar is installed. Yet another is to hijack and rewrite the Windows HOSTS file (a file Windows uses to associate a numerical address like 192.69.110.455 with a URL). And still another purpose is to install something called “World Antispy”. Although I wasn’t able to verify what this software did, my guess is that it wasn’t to help users out.

Combining the power of the toolbar with the rewritten HOSTS file allows the hacker to redirect your browser to sites it wants and cause popups to occur. Annoying to say the least, but could potentially guide you or your child to an inappropriate site.

This is further proof that IM is fertile ground for hacker mayhem. Becareful with whom you chat with online and be leary of the links that show up in your messaging window. When in doubt, ignore the link and go somewhere else online.