Dangerous Web sites, strings attached

Random search strings in Google can yield sites hosting drive-by downloads of malicious content.

As the automated Mpack attack continues to turn thousands of legitimate Web sites into compromised sites offering drive-by downloads of malicious software, security researcher Roger Thompson over at Exploit Prevention Labs reminds us there are other exploits compromising legitimate sites, and some are as easy to find as entering a simple search string on Google. For more than a week (starting before the current Mpack attack), Thompson has been posting a list of dangerous search strings on his blog site. I've collected these and indicated in parentheses some of the known exploits associated.

  • atlas mountains country (WebAttacker 2 or MPack)
  • rotweiller rescue
  • North Padre Island (WebAttacker 2 or Mpack)
  • arches national park (WebAttacker 2 or MPack)
  • canyonlands national park
  • mass lottery
  • air disasters in Florida (WebAttacker 2)
  • cd key windows xp profesional
  • batmobile for sale
  • victoria's secret (fake codec)
  • pokemon ruby gamesharks
  • blue book (mdac exploit)
  • IBM stock
  • pallet fire
  • Nigerian economic and financial crimes
  • who's a rat

Exploit Prevention Labs makes LinkScanner, a browser plug-in that will identify and block known exploits on tainted sites before you download the page. There are other safe surfing tools available as well; some are free.

Featured Video
This content is rated TV-MA, and is for viewers 18 years or older. Are you of age?
Sorry, you are not old enough to view this content.

Details about Apple's 'spaceship' campus from the drone pilot who flies over it

MyithZ has one of the most popular aerial photography channels on YouTube. With the exception of revealing his identity, he is an open book as he shares with CNET's Brian Tong the drone hardware he uses to capture flyover shots of the construction of Apple's new campus, which looks remarkably like an alien craft.

by Brian Tong