Re: CNET is Serving Malware

[Glen Roberts <glenroberts () me com>]

Agreed, Robert. I believe many issues are likely the ads and/or comments.


Glen Roberts


On Jul 1, 2012, at 19:28, Arch Angel <arch3angel () gmail com> wrote:

> I check a known bad site I came across which was due to ads, and wondered the same thing about CNET.
>
> It could also be from comments people have left that they don't filter.  Either way its obvious that its there :-)
>
> -- 
>
> Thank you,
>
> Robert Miller
> http://www.armoredpackets.com
>
> Twitter: @arch3angel
>
> On 6/20/12 11:20 AM, Mike Patterson wrote:
> > On 12-06-20 8:03 AM, Glen Roberts wrote:
> > > This morning while researching Google’s five-year anniversary of providing malware protection, I found evidence 
> > > that CNET is serving up malware to its site visitors to the tune of 151 exploits, 64 trojans and 22 bots. The 
> > > malicious software is hosted on internet-safeness.ru and publictivity.com appears to be an intermediary for 
> > > distributing malware to site visitors.
> > >
> > > I have notified CNET of the problem but it’s pretty concerning that another CBS property is making the news again 
> > > for being insecure. It was only a few days ago that the Last.fm password hashes that were dumped made the news.
> > >
> > > Here is the link you can use to take advantage of Google’s insight into sites serving malware: 
> > > http://google.com/safebrowsing/diagnostic?site=cnet.com. Just replace the parameter with the site you want to 
> > > inspect. I recommend you check out the sites you manage and visit using Google’s tool.
> > >
> > > I've posted a screenshot here: http://www.internetgeneral.com/cnet-serving-malware/
> > One might be inclined to wonder, as I did, if it's CNET itself serving
> > up the malware, or an ad network that's been popped.
> >
> > Mike
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com