Google, Yahoo and MSN spoofed by adware search engine

News

Google, Yahoo and MSN spoofed by adware search engine

Antony Savvas

Adware called PremiumSearch is redirecting Google, Yahoo and MSN users to spoofed searched engines in an attempt to raise cash from their site visits, according to security software company Panda.

Panda says the adware installs a fake Google toolbar on the user’s machine and sets the victim's browser home page to the PremiumSearch search engine, regardless of the setting displayed in the browser.

The adware also uses a DNS poisoning technique to rewrite the Hosts file on the infected user’s computer to redirect requests for Google.com, MSN.com and Yahoo.com to an IP address hosting spoofed versions of these search engines.

Panda says users' machines become infected with the adware if they are redirected to a web page after visiting pirate software or porn sites.

Panda said the spoofed search engines were probably being hosted by infected bot computers without their owners’ knowledge.


Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.
 

COMMENTS powered by Disqus  //  Commenting policy