Trojan lurks on Google Pages

A Trojan horse has been discovered in Google Pages, a website hosting service offered by the search giant.

An attacker apparently uploaded a malicious file to a Googlepages.com server, part of a service that allows people to create their own web pages, said Dan Hubbard, the senior director of security research at Websense Security Labs. The Trojan could lie dormant on a user's system until the individual logs on to a banking website and then attempt to steal his or her personal information by capturing their keystrokes, according to a security alert released on Friday by Websense.

Although the security monitoring company has detected the presence of the Trojan horse on Google Pages, it has not yet received any reports of bogus emails or instant messages that attempt to lure users to click on malicious links or download dangerous files.

Hubbard said: "This is not a high-level, zero-day type of threat. But when you have this big of [an internet site] name involved, security researchers tend to look at it."

Google said it is moving as quickly as possible to deal with the problem.

A Google spokeswoman said in an email: "Google Page Creator enables users to upload and serve files on their website. We understand some users are hosting and serving malicious files, and we are removing these web pages when notified. We are working on a more permanent solution to guard against these malicious efforts. However, we encourage users to continue to notify us when they encounter sites that host or serve malicious files."

Last week, Google's social-networking site, Orkut, was hit with a new worm. That worm, MW.Orc, also sought to steal online banking information from computer users.

Dawn Kawamoto writes for CNET News.com