Searching for “Google Chrome Download” on Yahoo Can Result in Malware Infection

[Matsuda]

In theory, the sponsored links and ads of major search engines should point to safe websites. However, in practice, that doesn’t always happen.

Researchers from ThreatTrack Security have found that users who search for “google chrome download” on Yahoo! might end up with a nasty malware infection. That’s because some of the sponsored ads point to a website called softpack(dot)info/chrome.

The “free software website” urges users to install applications through their own download manager, WeDownload Manager.

This practice is not uncommon for websites that offer free software downloads. However, the installers are usually bundled with adware. In this case, the Google Chrome installer offered on the site is a version of the notorious Sirefef/ZeroAccess malware.

When it’s executed, the installer deletes itself and installs Adobe Flash Player. In the background, it starts infecting the victim’s computer. Once it’s installed, the malware disables Windows security features to enable cybercriminals to download other threats.



View: Original Article

[sanjoa]

:troll: @Chrome

[calguyhunk]

Why would you download browsers from anywhere but the original developer sites (Google/Mozilla/Microsoft etc.)? :o

I hate it when sites/programs use a downloader instead of giving us the actual executable offline installer itself :rant:

For that very reason, I stopped D/L'ing from Cnet the day they started using their own downloader. Nobody installs any software on my PC's without my wish. Not even Oracle (Java) or Adobe (Flash/Reader) :mad2:

There are enough options to D/L most programs without going through the servers of those D/L sites (even the legit ones). Most developers have hidden/unpublicized url links to download offline installers from their own servers. As for the D/L sites - I believe MajorGeeks still doesn't bundle a downloader as yet :yes:

Edited November 1, 2013 by calguyhunk

[nIGHT]

Yahoo is playing fair and innocent here. :rolleyes:

Edited November 1, 2013 by nIGHT