[ad]<\/p>\n
I thought this would have been stamped out by now, but sadly it’s still going on. With the advent of cheap web hosting and easy to use CMS systems like WordPress<\/a> more and more people are managing their own websites (gone are the days of Geocities).<\/p>\n More people with websites means more FTP details to be stolen, and more websites to be spammed up by malware propagators.<\/p>\n With that sentiment, Gumblar is gaining more traction poisoning Google search results.<\/p>\n A Web attack that poisons Google search results is getting worse, according to security researchers.<\/p>\n The attack first relies on compromising normally legitimate website and planting malicious scripts. US CERT reports that stolen FTP credentials are reckoned to be the main technique in play during this stage of the attack but poor configuration settings and vulnerable web applications might also play a part.<\/p>\n Surfers who visit compromised websites are exposed to attacks that rely on well-known PDF and Flash Player vulnerabilities to plant malware onto Windows PCs.<\/p>\n This malware is designed to redirect Google search results as well as to swipe sensitive information from compromised machines, according to early findings from ongoing analysis.<\/p><\/blockquote>\n