Welcome to the Proxy Update, your source of news and information on Proxies and their role in network security.

Wednesday, May 20, 2009

Web attack that poisons Google results gets worse

The IDG news service reported that an attack on websites that affects Google search results known as the Gumblar attack has infected more than 3000 Web sites and is spreading quickly.

This new attack that peppers Google search results with malicious links is spreading quickly according to the U.S. Computer Emergency Readiness Team.

This malware can be found on several thousand legitimate Web sites. It targets known flaws in Adobe's software and uses them to install a malicious program on victims' machines.

The program also steals FTP login credentials from unsuspecting victims and uses that information to spread further. It also hijacks the victim's browser, replacing Google search results with links chosen by the attackers.

This attack is a good reminder to use a web proxy gateway running malware protection. A quick check with Blue Coat Systems verified that their Webfilter/Webpulse products used correctly already protect their this threat.

No comments: