You are here: silicon.com > Software > Malware

Malware

Google pulls nefarious sponsored links

When ads go bad...

Tags: adwords, malware, google

By Joris Evers

Published: 30 April 2007 08:51 BST

Google has removed paid links that advertised seemingly legitimate websites but actually tried to install nefarious programs on PCs.

The links were displayed as "sponsored links" after visitors entered specific queries into Google's search service. Clicking the links would ultimately go to a legitimate site but by way of another site that attempted a "drive-by installation" of password-stealing software. Miscreants placed the links using Google's AdWords service for advertisers.

According to a company representative writing on a corporate blog: "Google identified and cancelled AdWords accounts displaying ads that redirected users to malicious sites."

The malicious links appeared after people searched for terms related to the Better Business Bureau and cars, according to Exploit Prevention Labs, a security company. All the paid-for links masqueraded as legitimate sites and redirected Google users to the actual sites after sending them to smarttrack.org, which served up the malicious code, Exploit Prevention Labs said.

Roger Thompson, CTO of Exploit Prevention Labs, added: "We detected about 20 different search strings that resulted in links to smarttrack.org. There were multiple ads linking to a single site, a high level of planning, and cunning by the bad guys."

Google is looking at its AdWords practices to prevent similar incidents in the future, the company said. "This is an issue we've taken very seriously and will continue to monitor," it said. "We are also evaluating our systems to ensure that the appropriate measures are in place to block future attempts."

Joris Evers writes for CNET News.com

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Sales Engineer, Developer Operations - Java, SQL, XML, SOAP/WSDL, REST - London, South East

Communicate best practices and design recommendations for partner platform development using Google APIs, such as AdWords and Checkout. You will work ...

Software Engineer - C / C++, Java, UNIX / Linux - London, South East

Software Engineer - C / C++, Java, UNIX / Linux - London, South East The area: Software Engineering Google's software engineers develop the ...

Graduate and Intern Opportunities with Google

Our work at Google also requires ideas from many non-technical fields, and we currently have New Graduate and Intern positions available in online ...

CIO Agenda 2008
The exclusive silicon.com CIO Agenda 2008 survey looks at the CIO's tech shopping list for the year, examines whether IT budgets are rising or falling and reveals what the pain points are for tech chiefs this year. Find out more in our latest special report.





Quick Sitemap Links: