Forest Global Training Partners

Cyber Risks · Krebs on Security

Google Debuts “This Site May Be Compromised” Warning

Summary: Google expanded its search-result warnings beyond the existing "This site may harm your computer" label to add a "This site may be compromised" notation, aimed at pages that may not host malware but show signs the legitimate owner has lost control, such as injected invisible links, redirects to pharmacy sites, or phisher-added pages. The Anti-Phishing Working Group estimates 75 to 80 percent of phishing sites are legitimate sites that have been hacked and seeded with phishing kits mimicking e-commerce and banking sites.

What you should know: Most phishing pages your users land on are not attacker-built sites but compromised legitimate ones, so a clean domain is not evidence of a clean page - and Google's own rollout lagged, with researcher Denis Sinegubko noting 90 percent of results for a test search should have been labeled compromised but showed no warnings.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related