Monday | 6 September, 2010
CSO
Google blacklists ATUG Web site
ATUG unaware of breach, Google unwilling to discuss details

Hackers may have hit the Australian Telecommunications User Group (ATUG) Web site, according to Google which has placed security threat warnings across all pages displayed in searches.

The flag — which reads “this site may harm your computer” — underscores all ATUG Web pages and documents generated in Google searches. Google's badware security warning page advises users to avoid the site.

ATUG was unaware of the label when contacted by Computerworld magazine this morning.

The blacklists are produced by an alliance of online consumer protection groups, telcos and security vendors including AOL, VeriSign and Google, and stored in a clearinghouse maintained by StopBadware.org, a security watchdog used by Google to identify and evaluate malicious Web sites.

Google reported malicious content on the ATUG Web site, although it refused to divulge specifics on the alert.

A Google spokesperson contacted by Computerworld for a separate article refused to comment on how often the company re-checks flagged Web sites; however, employee Phil Harton said in a blog posting that it can take up to two weeks to remove alerts once badware has been wiped.

“We've begun sending email notifications to some of the Web masters of sites that we flag for badware. We don't have a perfect process for determining a Web master's e-mail address, so for now we're sending the notifications to likely Web master aliases for the domain in question,” Harton said.

The response times vary depending on the extent of infection and how quickly exploits are fixed, according to StopBadware.org.

“Google is the sole decider for initial decisions to post a warning page for a Web site [and it] does not rely on any testing or reports from StopBadware in making these initial decisions,” the company stated on its Web site.

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Enter the fully qualified URL, eg. http://www.example.com/
Users posting comments agree to the CSO Online comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Additional Resources
Newsletter Subscription
Sign up for our CSO Online newsletters!
RSS Feeds
Syndicate content Syndicate content Syndicate content
 
Whitepaper

Automation Makes Perfect: Taking the Time Crunch Out of IT Compliance with Automation

Automation makes compliance part of day-to-day operations, enabling CIOs to shift time to more important things—like a security strategy that protects the business, rather than simply pleases an auditor. Read this exclusive white paper from compliance leader Tripwire to learn how a Protect, Detect, and Correct compliance strategy can give you back your most precious resource: time.