Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
BitDefender Detects Trojan that Hijacks Google Advertisements
Posted on 22-Dec-2007 09:25. | Tags Filed under: News.



BitDefender have detected a new trojan which hijacks Google AdSense text advertisements, replacing them with ads from a different provider.

The threat, which is identified by BitDefender as Trojan.Qhost.WU, modifies the infected computers' Hosts file (a local storage for domain name / IP address mappings, which is consulted before domain name servers and is considered authoritative).

The modified file contains a line redirecting the host "page2.googlesyndication.com" which should point to an IP of the form 6x.xxx.xxx.xxx to a different address, of the form 9x.xxx.xxx.xxx, so that the infected machines' browsers read ads from server at the replacement address rather than from Google.

"This is a serious situation that damages users and webmasters alike," said Attila-Mihaly Balazs, a BitDefender virus analyst. “Users are affected because the advertisements and/or the linked sites may contain malicious code, which is a very likely situation, given that they are promoted using malware in the first place. Webmasters are affected because the trojan takes away viewers and thus a possible money source from their websites.”



More information: http://www.bitdefender.com/site/VirusInfo/rea...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

Gareth Morgan is a genius
Created by Satch, last reply by JayADee on 11-Dec-2016 09:01 (177 replies)
Pages... 10 11 12


NZ Prime Minister John Key Resigns
Created by ajobbins, last reply by Fred99 on 11-Dec-2016 07:35 (222 replies)
Pages... 13 14 15


The President Of The USA - Who do you think?
Created by TimA, last reply by DarthKermit on 10-Dec-2016 20:29 (913 replies)
Pages... 59 60 61


Spark wireless broadband and home /lan access: CGNAT limitations
Created by yokkem, last reply by BarTender on 8-Dec-2016 15:57 (19 replies)
Pages... 2


Spark not planning to deploy native IPv6 at all. Ever.
Created by Erayd, last reply by sbiddle on 7-Dec-2016 20:57 (19 replies)
Pages... 2


Woooaaahh earthquake 2016-11-14
Created by Fred99, last reply by DarthKermit on 9-Dec-2016 16:16 (471 replies)
Pages... 30 31 32


Wilson's Car Park - When Free is not free
Created by nzkiwiman, last reply by cr250bromo on 9-Dec-2016 09:30 (51 replies)
Pages... 2 3 4


JB Hifi Cost & GST Sale - 7th Dec
Created by Finch, last reply by Kopkiwi on 7-Dec-2016 15:11 (16 replies)
Pages... 2