Alerts
Google Pages hosting crimeware
Date:06.16.2006
Threat Type: Malicious Website / Malicious Code
Websense® Security Labs™ has discovered that the Google website hosting service "Google Pages" is hosting malicious code. To date have not had reports of a lure for the sites within email or Instant Messaging linking to this site or exploit code downloading it, however it may either be in the setup phase or not be widely distributed yet.
The site is hosted on the same IP address as the main http://www.googlepages.com site. The file is packed with ASPack and is a banking Trojan Horse which is designed to steal banking credentials upon visiting pre-defined financial institutions sites.
Real-time Security Updates have been published and the website is being blocked in the Websense Security Premium Group until the code is removed and the Trojan Horse Keylogger has been classified within CPM.