Google Typo Crashes Systems

2005-05-02 22:23:14
Spyware authors and phishing fraudsters yanked an old scam out of the playbook Wednesday by directing malicious code at Internet users who may be prone to typing or spelling deficiencies, according to security researchers.

"Our investigation revealed that the whole infection starts from the 'googkle.com' Web site. This Web site, as well as a few related Web sites are owned by people with Russian names. Also, several malicious files that are downloaded from these Web sites have Russian texts," F-Secure said in a statement.

When "googkle.com" opens in a browser, it shows two popup windows that are linked to several Web sites, F-Secure said. The first popup reveals a phishing-style Trojan that requests individuals' online banking information. The other deposits phony antivirus alerts on the desktop and attempts to pull victims into other infected sites.