Use well-known websites to cheat and drive Trojans (1)

Use well-known sites to cheat and drive Trojans

There are many "phishing Pushing)" attacks on the Internet, which trick netusers into browsing malicious websites by various means, leading to the loss of passwords of various online banking or game accounts. Likewise, phishing attacks are also used to spoof sex web Trojans.

Search for Trojans using Google Images

Many users are still very reassured about large websites such as Google, Baidu, TOM, and sina. Therefore, many users may click the links to these websites with confidence. However, these large websites are not so secure and may also be exploited by attackers to launch Trojan attacks.

For example, in a forum, a netman can see a post named "hidden XX images searched by Google", with a link pointing to Google Image Search:

Http://images.google.com/imgres? Imgurl = porn & imgrefurl = % 68% 74% 74% 70% 3a % 2f % 2f % 77% 77% 77% 2e % 62% 61% 69% 64% 2e % 75% 6f % 6d & tbnid = W

Because this link is directed to Google image search, browsing does not doubt the security of the link source. After clicking the link, you will not see the image you want to see, but will be attacked by a Trojan.

Taking Google as an example, Google is the world's largest search engine, and Google has other huge WEB application product lines, it involves almost all Internet applications such as EMAIL, BLOG, online documentation, personal homepage, electronic map, forum, and RSS. However, the image search service provided by Google has a security problem.

On the Google image search result page, click an image to open an image preview page. The image information is displayed at the top of the page, and the Image Source Page 1 is displayed in the frame below ).

Figure 1 image preview page