Blogger.com's Vulnerability to Phishing Attacks

Blogger.com was recently attacked by hackers who posted fake blogs to spread malwares. Fortinet Inc. posted an advisory in their website warning people of a malicious computer script that redirect weblog readers to a phishing site called Pharmacy Express, a phishing site that has turned up in many spam emails distributed by the Stration worm.

According to the company, genuine looking blogs are now being created and infected to host a variety of script initiated malwares. the topics of this blogs ranges from starwars, cars to furniture. Fortinet also gives an example of this sites, including a supposed fan of Honda CR450 motor car. Readers of this site might be infected with Wonka TrojanVirus.

" These are not legitimate blogs that were compromised. They appear to be deliberately set up to promote phishing, which is against our terms of service. We are investigating, and blogs found to include malicious code or promote phishing will be deleted. " - Google in a statement to CNET

Frotinet assessed this threat in its fourth highest severity ranking in a five point scale, five being the highest.