Return of Innocent Searches

Hi folks,

I keep getting requests offline for more innocent searches, so here are some from the last couple of days. Enjoy...

coal furnace with gas insert - fake codec
road trip - neosploit
pearl shop - neosploit
high capacity battery pack - fake codec/ rootkit
eyelashes + adhesive - fake codec
camping turon gate - fake codec
greenville gremlins - fake codec
blueberry jam - mpack/ icepack
school closings in illinois parents - search engine hijack
las vegas wedding photographers - mdac
carolina theater - mpack/ icepack

Stay safe folks,

Roger

Innocent searches for Nov 21 2007

Hi folks,

Here are some of the Innocent Searches that might get you into trouble from just today. There are rather a lot of them...

AREA MEASUREMENT - wrong choice gets a link to a known exploit site
recipe for bine turkey - what's a bine turkey? anyway, wrong choice gets a rootkit
currency converter - rootkit
americanexpress/activate - rootkit
sixth avenue electronics - rootkit
deltashuttle - rootkit
blue licenses holding - rootkit
office depot links paper templates - rootkit
knitted or crocheted dachshund patterns - rootkit
fishing site - rootkit
avolon grand cancun,mexico - mdac exploit
demising - rootkit
radio blog club - mdac exploit
hp csn - rootkit
LEGO DUPLO Block-o-dile - rootkit
degrassi fan fiction - rootkit
ASA 5510 throttling - rootkit
durrants auctions - WebAttacker/MPack
cluck u chicken - link to known exploit site
define scupper - rootkit
nfl picks - link to known exploit site
gary senner myspace - trojan installer
laundromat franchises - link to known exploit site

Two interesting things... (1) most of the rootkits are being installed by social engineering tricks and (2) we're seeing about this many "Innocent searches" turning up malicious sites every day, which is a big increase from what we used to see.

Cheers

Roger

Just for grins...

Hi folks,

Just for grins, I thought I'd list some more innocent searches from the last two of days...

"crash bandicoot warped iso" gets a rootkit via social engineering
"The Hartford" wrong choice gets a WebAttacker/ Mpack
"sock monkeys" wrong choice gets a link to a rootkitter
"chinese bamboo fountain" wrong choice gets a rootkit
"free dachshund sweater patterns online" wrong choice gets a rootkit ... whatever
"woodhaven cellars" - rootkit
"wwww.mapquest.com" - rootkit
"table legs" - rootkit
"car parts search toronto %22sun visor%22 honda" - rootkit
"michigan christmas walpaper" - rootkit
"cincinati model railroads" - rootkit
"1978 trans ams for sale" - rootkit
"workwear boots in lake street, minneapolis" - rootkit
"irish gifts annapolis" - rootkit
and last but not least
"TRAMPOLINE cakes" - rootkit.

Whatever!

Cheers

Roger