Researcher: Phishers exploit Google Gadget platform

By
Follow google news

Google's gmodules.com, which hosts the Google Gadget feature, is susceptible to exploitation by phishers, an internet security researcher has warned.

Researcher: Phishers exploit Google Gadget platform
Malicious users are using the platform to host and redirect users to phishing websites, according to a blog entry by Robert Hansen on ha.ckers.org.

The security researcher reported the problem to Google last week, which responded by email saying: “this is not a bug, but instead the expected behaviour of this domain.”

Hansen said that cybercriminals were using gmodules.com to host phishing sites and to prevent the closure of the fraudulent websites.

He slammed the internet giant for not responding to the cross-site scripting (XXS) problem appropriately, misunderstanding the risk and failing to combat the issue to protect its customers.

“Putting phishing sites on gmodules.com is apparently expected behaviour,” Hansen wrote in the blog. “This is the third time they [Google] have said what I reported was either not a bug or too hard to fix.”

Google could not be reached for comment.

Got a news tip for our journalists? Share it with us anonymously here.
Tags:

Most Read Articles

National photo licence recognition system set to go live in 2025

National photo licence recognition system set to go live in 2025

Qantas says customer data released by cyber criminals

Qantas says customer data released by cyber criminals

Hackers using F5 devices to target US gov networks

Hackers using F5 devices to target US gov networks

NSW gov contractor uploaded Excel spreadsheet of flood victims' data to ChatGPT

NSW gov contractor uploaded Excel spreadsheet of flood victims' data to ChatGPT

Log In

  |  Forgot your password?