Vulnerability Alerts
SANS
 
Microsoft
 
CERT/CC
 
 
Latest Comments
"Concerned man's comments seem to intimate that if I'm using agents all will be well but the ..."
on Shavlik Technologies to broaden its patch management offerings
by Werner K | Nov 26, 2008 8:36 PM
 
"That will enhance Microsoft Office system, including SharePoint - good platform for enterprise ..."
on Companies have security to consider with in-the-cloud Office
by SGE | Nov 25, 2008 3:29 PM
 
"how many users allow per session? because the digital persona password manager allows only 10 ..."
on DigitalPersona Pro Workstation/Pro Server
by Daniel | Nov 25, 2008 12:14 AM
 
"security through obscurity...shows how detached HIPAA is from reality."
on Privacy breaches causing business instability
by priceOfFishInChina | Nov 20, 2008 1:19 PM
 
"I have been the recipient of Agent.JEN.Trojan through an email suggesting a UPS parcel (including..."
on Trojan disguised as UPS delivery note
by Vincent Laing | Nov 13, 2008 4:01 PM
Web

Researcher: Phishers exploit Google Gadget platform

  • Email a Friend
  • Print Page
Researcher: Phishers exploit Google Gadget platform
Related Articles
By Fiona Raisbeck
Aug 23, 2007 7:32 AM
Tags: Researcher: | Phishers | exploit | Google | Gadget | platform
Malicious users are using the platform to host and redirect users to phishing websites, according to a blog entry by Robert Hansen on ha.ckers.org.

The security researcher reported the problem to Google last week, which responded by email saying: “this is not a bug, but instead the expected behaviour of this domain.”

Hansen said that cybercriminals were using gmodules.com to host phishing sites and to prevent the closure of the fraudulent websites.

He slammed the internet giant for not responding to the cross-site scripting (XXS) problem appropriately, misunderstanding the risk and failing to combat the issue to protect its customers.

“Putting phishing sites on gmodules.com is apparently expected behaviour,” Hansen wrote in the blog. “This is the third time they [Google] have said what I reported was either not a bug or too hard to fix.”

Google could not be reached for comment.

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
Vulnerabilities & Exploits Whitepapers
 
Popular Tags
content effective exploit exploits facebook flaw frame google guide hackers hacking hosted launched microsoft opens reports spam symantec webmasters worm