News

Google, Yahoo and MSN spoofed by adware search engine

Antony Savvas

Adware called PremiumSearch is redirecting Google, Yahoo and MSN users to spoofed searched engines in an attempt to raise cash from their site visits, according to security software company Panda.

Panda says the adware installs a fake Google toolbar on the user’s machine and sets the victim's browser home page to the PremiumSearch search engine, regardless of the setting displayed in the browser.

The adware also uses a DNS poisoning technique to rewrite the Hosts file on the infected user’s computer to redirect requests for Google.com, MSN.com and Yahoo.com to an IP address hosting spoofed versions of these search engines.

Panda says users' machines become infected with the adware if they are redirected to a web page after visiting pirate software or porn sites.

Panda said the spoofed search engines were probably being hosted by infected bot computers without their owners’ knowledge.


Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
 

COMMENTS powered by Disqus  //  Commenting policy