Beware of Google's Blogger

[mandy]

Surfing Google's Blogger Web site is dangerous, warns Fortinet. Several of the blogs on the site have been taken over by miscreants and redirect to phishing Web sites or try to load malicious software onto PCs, the security firm said in an alert Wednesday.

In one example a Blogger blog redirects to what appears to be an online pharmacy, but is in fact a site hosted in China that's part of a scam to trick people into giving up personal details and financial information, Fortinet said...

full article: http://news.com.com/2061-10789_3-6167750.html

Malicious Code Appears on Blogger.com
2007.March.14

Blogger.com ( Google ) is one of the most visited blog sites. Due to its popularity, hackers have started to embed malicious scripts on some blogs. These scripts have shown up on hundreds of Blogger.com sites. In some cases, a variant of the Stration mass mailer is responsible for directing traffic to the Blogger.com sites.

Pharmacy Express

One script redirects the user to a “storefront” for Pharmacy Express. The Pharmacy Express site is a phishing site, which is designed to coax personal details and financial information from visitors.

Another script downloads a 1x1 pixel image to track the browser information, such as, IP address, browser type and version, etc. While the Pharmacy Express site is hosted in China, the 1x1 pixel image is hosted on a site registered in the United States

full article: http://www.fortiguardcenter.com/advisory...07-04.html