Google 'opens up' a wide range of websites for phisher

Experts have discovered an extremely serious security bug in the Google Search Appliance and Google Mini may be exploited by hackers to attack phishing information on any website that uses Google's search technology.

The Google Search Appliance and Google Mini are a commonly used tool to help corporate organizations add Google search engine functionality to their websites.

New security flaws are discovered by experts in the way Google's applications handle special characters. Hackers can take advantage of this factor to create a special website link, spoofing a link to a trusted website, but in fact it is a link to a malicious website.

" A lot of big websites are facing the risk of being attacked ," said John Herron, security researcher and website operator NIST.org. " Not only that, but also the attacker can allow an attacker to change the interface of the website if the user clicks on the malicious link ."

This security flaw is also really an "opportunity" for online scammers to attack users to steal confidential personal information such as bank account credit card information . Attack methods Through security flaws in Google Search Appliance it seems easier to succeed than sending spam emails to trick users into clicking on a malicious link attached.

A Google spokesperson said they had detected this security error from the previous week. " We have sent a warning to every customer and provided them with the information needed to minimize the risk of attack. We have not yet recorded any information about any attack on Google users. Which Search Appliance and Google Mini are ".

Google confirmed that this security error will be fixed in the next version of the Google Search Appliance and Google Mini and said users should quickly contact the company to be provided with necessary corrective information.

The solution helps Internet users avoid the risk of being attacked by taking advantage of the Google Search Appliance or Google Mini security flaws, so carefully check the website link before clicking on. Usually fake links are often very long.

Hoang Dung