Misspelled versions of two popular Google services are among the Top 10 sites hosting exploits for use in drive-by malware download attacks.
On the heels of two massive drive-by attacks — ten of thousands of hijacked sites launching attacks via the browser — Google released a list showing that malicious hackers are typo-squatting on its domains to evade detection and to keep malware sites alive for long periods.Here’s the top 10 list:38zu.cngoogleanalytlcs.netlousecn.cnfqwerz.cngoooogleadsence.biz94.247.2.195gumblar.cnd99q.cnorgsite.infomartuz.cnThe list above contains domains referenced by hacked Web sites. According to Google, all domains on the top-10 list are suspected to have compromised more than 10,000 web sites on the InternetGoogle scans its index for dangerous Web sites and, according to Niels Provos, the company’s automated systems found more than 4,000 different sites that appeared to be set up for distributing malware by massively compromising popular web sites.Of these domains more than 1,400 were hosted in the China’s .cn top level domain.Several contained plays on the name of Google such as goooogleadsence.biz and googleanalystics.net.http://blogs.zdnet.com/security/?p=3497 DKD DomainNews
