Skip to main content

Don't Make Your Blog Vulnerable To Strategic Malware

In 2009, Blogger Help Forum: Get Help with an Issue had various reports about blogs mysteriously redirecting to "".

Later that year, and into 2010, we saw new reports mentioning "", then "". When we investigated the redirections, we found people with blogs that used a picturesque animated decoration known as "falling snow" - and later, as Valentines Day 2010 approached, "falling hearts".

The victimised blog owners, too frequently, admitted to having installed various gadgets provided by helpful non Blogger website owners. Diagnosing the problem, however, was frequently obscured by the claims.
But I installed that gadget months ago!
In some cases, diagnosed in December 2009 - February 2010, the misbehaving gadgets had been installed as far back as Summer of 2009.

Many misbehaving blog accessories were found available from various non Blogger websites, from helpful third party developers.

In Winter 2011 / Spring 2012, we discovered new classes of malware - gadgets being provided using "Add a Gadget", and served from Google sanctioned third party contributed libraries. We had redirectors like "", targeting websites such as "".

We have actually observed four waves of hijack attacks upon Blogger blogs (the above two are the best documented), which appear to provide commercial or financial reward to the hackers maintaining the malicious and misbehaving gadgets. Some websites served from the "" redirection were found to be serving very deviously packaged malware - that helped to enslave various reader computers, as botnet members.

This year, we're observing more victims, who have installed gadgets from "", and "" - with redirectors such as "". We also see problem reports from owners of blogs with NeoCounter and other NeoWorx products - and similar complaints from readers of the blogs.

When advised to remove identified gadgets, many blog owners again complain.
I installed that gadget months ago, and it's been working just fine! Surely, that is not my problem!!
But based on the other problem reports - and later by the admission of the blog owners - the gadgets removed will prove to be the source of the problem.

The lessons from all of this? You need to be very selective about where you get accessories and advice - and you need to accept skeptically - if at all - the casual evaluation.
It's working fine today, after I installed it last month - so it must be a good gadget! Now, I can recommend it to my friends!!
If it seems too good to be true, it probably is.

You get readers from informative, interesting, and unique content - not from free content and shiny gadgets.


Renee Ondrajka said…
This was very helpful. I appreciate the advice. I also removed my pin gadget, but it seems that my pictures still have it on there. What could be the reason? I still want my pics to be able to be pinned, but I thought removing the gadget would make that no longer possible. Thanks for any advice.
Nitecruzr said…
Hi Renee,

Thanks for asking the question.

IIRC, your blog has three Pinterest gadgets. You only need one. And if they are from "", they can be trusted. But you should only have one.

Popular posts from this blog

What's The URL Of My Blog?

We see the plea for help, periodicallyI need the URL of my blog, so I can give it to my friends. Help!Who's buried in Grant's Tomb, after all?No Chuck, be polite.OK, OK. The title of this blog is "The Real Blogger Status", and the title of this post is "What's The URL Of My Blog?".

Leave Comments Here

Like any blogger, I appreciate polite comments, when they are relevant to the blog, and posted to the relevant article in the right blog. If you want to ask me a question thats relevant to blogging, but you can't find the right post to start with (I haven't written about everything blogger related, yet, nor the way things are going I don't expect to either), ask your questions here, or leave an entry in my guestbook.

As noted above, please note my commenting policy. If you post a comment to this post, I will probably treat it as a "Contact Me" post. If you have an issue that's relevant to any technical issue in the blog, please leave a comment on the specific post, not here. This post is for general comments, and for non posted contact to me.

If the form below does not work for you, check your third party cookies setting!

For actual technical issues, note that peer support in Blogger Help Forum: Something Is Broken, or Nitecruzr Dot Net - Blogging is, almos…

What Is "" vs. ""?

With Google Domains registered custom domains becoming more normal, we are seeing one odd attention to detail, expressed as confusion in Blogger Help Forum: Learn More About Blogger.My website uses "" - am I supposed to use "", instead?It's good to be attentive to detail, particularly with custom domain publishing. This is one detail that may not require immediate attention, however.