Google Gadgets Opening Door for Multifarious Attacks

Security Experts at Cenzic, a company that makes software for testing security, have discovered that Google Gadgets and small programs like everyday photo feeds or calendars could also serve as a base for exploiting users.

The researchers found that attackers could forcibly install malicious Google Gadgets. And by doing that, they could view victims' search history. Furthermore, they could potentially steal victims' usernames and passwords.

According to Tom Stracener, Senior Security Analyst at Cenzic, Google Gadgets can be used to attack end-users. The kind of attacks can vary from cross-site request forgery to phishing in which a user clicks on a link and unsuspectingly respond on a Website with actions tha...

» SPAMfighter News - 20-08-2008