A new Trojan has managed to hijack Google text advertisements and replace them with possibly malicious ones.
Detected by Trend Micro as TROJ_QHOST.GC, this Trojan modifies a computer’s HOSTS file to prevent users from connecting to page2.googlesyndication.co. This particular site directs to a server for advertisements enrolled to AdSense, the advertising service offered by Google.
What this Trojan does instead, is that it makes the browser point to another IP address that functions as a rogue server to third party advertisements about gambling and pornography.
Google has already taken action by launching an investigation and has reportedly cancelled customer accounts with advertisements that redirect users to possibly malicious Web sites and those that advertise products that violate their software principle.
If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!



December 25th, 2007 at 10:17 am
[...] software company Trend Micro reported that a Trojan called TROJ_QHOST.GC has managed to hijack Google’s text [...]
December 25th, 2007 at 12:50 pm
[...] biva preusmeren na odredjene sajtove koji prodaju viagru, kladionice, adult sajtove i slicno. Kako Trend Micro objavljuje, Google je vec preduzeo mere u vezi ovih incidenata. Videcemo koliko je masovno zahvatio racunare [...]
December 18th, 2008 at 12:22 pm
[...] zneužívána reklama umístěná na webech s vysokou návštěvností. Oblíbené stránky jako Google, Expedia.com, Rhapsody.com, Blick.com a dokonce Myspace byly napadeny škodlivými reklamními [...]