New information about searches related to cars and betterbusinessbureau generating malicious AdWords links has been relased at Washington Post Security Fix blog:
http://blog.washingtonpost.com/securityfix/2007/04/virus_writers_taint_google_ad.html
pointing to the blog entry of Exploit Prevention Labs, located at
http://explabs.blogspot.com/2007/04/google-sponsored-links-not-safe.html
Prevention Labs have shared some screenshots about the related searches, because they don't generate malicious AdWords ads any more.
These links typically pointing to .org type ad addresses spread malware, which exploit recent Windows vulnerabilities, Animated Cursors issue etc. |
Roger Thompson has also made a short video about how the scam worked. This is available on YouTube at http://www.youtube.com/watch?v=iD0wdzQb8XY |
Thanks for this nice additional information, Pat! |
And anti-virus company McAfee sees this threat as JS/Exploit-BO.gen,
Their description document is located at
http://vil.nai.com/vil/content/v_130621.htm#tab7 |
