A large-scale, coordinated campaign to steer users toward malware-
spewing Web sites from Google and other Internet search engines is
under way, security researchers said Tuesday.
Users searching Google, Yahoo, Microsoft Live Search and other engines with any of hundreds of legitimate phrases -- from the technical "how to cisco router vpn dial in" to the heart-tugging "how to teach a dog to play fetch" -- will see links near the top of the results listings that lead directly to malicious sites hosting a mountain of malware.
"This is huge," said Alex Eckelberry, Sunbelt Software's CEO. "So far
we've found 27 different domains, each with up to 1,499 [malicious]
pages. That's 40,000 possible pages."