Hacked WordPress Blogs Used to Poison Google Image Search

A researcher has found evidence of thousands of compromised WordPress blogs that are being used to insert malicious images into Google search results. The report, from the unmaskparasites.com blog, may be evidence of the after affects of a widespread attack on WordPress blogs reported last week, ...

Widespread LizaMoon Web Attacks Push Rogue Antivirus

Security firms are warning about a fast-spreading Web based attack that has been linked to the installation of rogue anti virus products. More than 300,000 Web sites have been compromised in a campaign dubbed “LizaMoon,” and are now serving up malicious links to rogue antivirus products, accordin...

9) Meet the new spam, same as the old spam

As in life in general, if something works, you stick with it. How else to explain the continued popularity and prevelance of e-mail based spam and phishing attacks, even though everyone knows that e-mail is so “1998”? Alas, the truth is that attacks embedded as links or malicious attachments in...

Real SEO Feeding Traffic to Fake Search Engines

Online scam artists are using black hat search engine optimization SEO techniques to push more than just malicious software. In fact, SEO is increasingly being used to drive traffic to a range of phony Web based search engines that are feeding cost-per-click advertising scams, according to a blog...

SEO Scareware Campaign Compromises 200K Websites

Security researchers have detected a massive blackhat SEO search engine optimization campaign consisting of over 200,000 compromised web sites, all redirecting to fake security software Inst58s6.exe, commonly referred to as scareware. The massive blackat SEO campaign has been launched by the same...

Twitter API Being Exploited by Drive By Malware

Drive-by exploit writers have been spotted using a popular Twitter command to send web surfers to malicious sites, a technique that helps conceal the devious deed. According to researcher Denis Sinegubko, it’s being added to heavily obfuscated redirection scripts injected into compromised website...

Mitigating Web-Based Malware Attacks

In this Google Tech Talk, Neil Daswani, founder of Dasient and a former Google engineer, discusses the recent epidemic of attacks featuring legitimate Web sites that have been compromised by malware and what can be done to combat the threat...