Typo'd Google domains in Top 10 malware exploit sites
Misspelled versions of two popular Google services are among the Top 10 sites hosting exploits for use in drive-by malware download attacks.
On the heels of two massive drive-by attacks — ten of thousands of hijacked sites launching attacks via the browser — Google released a list showing that malicious hackers are typo-squatting on its domains to evade detection and to keep malware sites alive for long periods.
Google scans its index for dangerous Web sites and, according to Niels Provos, the company’s automated systems found more than 4,000 different sites that appeared to be set up for distributing malware by massively compromising popular web sites.
