Stay Ahead With Linux Security News

browser protectionmalware concealmenthacked websites

Concealing Malware In Hacked Websites: Evasion Tactics From Search Engines

Criminals are increasingly attempting to conceal malware embedded in hacked websites from search engines such as Yahoo! and Google. Their aim is to prevent browsers which use technology such as Google's Safe Browsing API from sounding the alarm when a user visits a hacked website. Google's Safe Browsing API allows client applications to query Google's phishing and malware blacklist. Firefox and Google Chrome both make use of the API, which is based on Google searches of websites for suspicious code.. If a Google search bot reaches one of these sites that conceal malware, it is recognised and simply fed harmless code. Web applications can identify visits from Google from the IP address and from the user agent (googlebot, yahoo) and can then use this information to control optional redirects to other pages. This can be achieved with just a few lines of code inserted into a hacked PHP web application. Fraudsters often use compromised websites, but also sometimes use special blog software. The link for this article located at H Security is no longer available. . If a Google search bot reaches one of these sites that conceal malware, it is recognised and simply . criminals, increasingly, attempting, conceal, malware, embedded, hacked, websites, search. . LinuxSecurity.com Team

Apr 26, 2010 • LinuxSecurity.com Team Hacks/Cracks