Google ads hijacked by trojan

 

Gallery

By Reuters

Posted on 20 Dec 2007 at 08:00

Google ads are being hijacked by trojan software that replaces the intended text with links to malicious sites, according to antivirus company BitDefender.

The trojan redirects queries meant to be sent to Google servers to a rogue server, which displays ads from a third party instead of ads from Google, BitDefender claims in a statement.

Google admits it has a problem. "We have cancelled customer accounts that display ads redirecting users to malicious sites or that advertise a product violating our software principles," the company claims.

"We actively work to detect and remove sites that serve malware in both our ad network and in our search results. We have manual and automated processes in place to detect and enforce these policies."

The trojan attacks Google's AdSense service, which targets advertisements to match web page content. "This is a serious situation that damages users and webmasters alike," claims BitDefender virus analyst, Attila Balazs.

"Users are affected because the advertisements and/or the linked sites may contain malicious code," he adds. "Webmasters are affected because the trojan takes away viewers and thus a possible money source from their Websites."

BitDefender describes the trojan, which it identifies as Trojan.Qhost.WU, as spreading at a "low" level and causing "medium" damage.