Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Article: Third-Party Database Tools | Main | Don't Write Off CAPTCHAs Yet »

Free Web 2.0 Sites Used to Push Porn

Online porn can be a money maker if you can get the traffic to sites and it looks like some are turning to Google Groups to help drive customers. InformationWeek is reporting that porn spammers compromised Google's services possibly bypassing the Captcha challenges.

Over the weekend, pornographic images and videos began appearing on Google Groups pages, along with infectious malware.

"These pages push other porn pages for profit," said Alex Eckelberry, CEO of security company Sunbelt Software, in a blog post. "While not all of the redirects go to malware sites, we did observe some redirects to a site which ultimately pushes a fake codec trojan, which if installed, results in a VirusHeat infection.

Google has taken down the problematic sites but questions remain about the effectiveness of the captcha tests for blocking automatic registrations in Google Groups. Spammers don't need a high accuracy rate on the captcha tests anymore than they need a high response rate on spam. If they can get through 1 in 10 or even 1 in 100 times the resulting profit can make the effort worth it. This raises the bar on the effectiveness of tests to verify a human is actually filling out online registration forms.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/655

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net