Google Changes Malware Warnings

As expected, Google has changed their process when they detect malware or ‘malicious’ content on websites.  As reported today on CNET: ‘Google search results warn of compromised sites’ Google is now adding new links into the search results:

‘Starting today, Google search users should start seeing a new hyperlink warning that says “This site may be compromised,” adjacent to some results if Google’s system has detected something on the site that would indicate that it has been hacked or otherwise compromised.”

We have been telling our customers for quite some time now that Google will continue to get more aggressive with both their scanning and their reactions when they detect any sort of malicious activities.  Indeed, based on external postings by their team, Google considers search users to be ‘their users’ and thus are justified in sometimes what are considered draconian measures (such as blocking access, delistings, etc.).

As the risks increase – via trojan downloads, increasing malware attacks via ad servers and general widespread effective usage of Google Search Results themselves to find new targets – Google will continue to increase pressure on site owners to share the responsibility for Internet Security.

We feel that this measure that Google is enforcing is a reasonable approach and we laud the fact that Google is at least giving site owners more information on the resolution process – instead of the historic route which was a blanket site block and really no useful information for website owners.

Going forward, we are reiterating our stance that aggressive web vulnerability scanning are a primary mechanism to avoid these brand and business damaging actions that businesses are subjected to. We developed our solutions to scan for vulnerabilities, giving you time to address them before the Googlebot blacklists your site.

When the bot flags your site, you are now on a long and usually painful process path (remediation, reapplication, flapping-effect of various browsers blocking traffic, Search Engine listing, SEO impacts, etc.)

Net effect. Scan for web vulnerabilities to ensure you are not placed in this position.