Experts warn that insufficient validation and auditing conducted by Google allows malicious files to be hosted on its Google Code , which is increasingly used by hackers.
Experts from Zscaler have spotted malicious files in Google Code. They discovered two .jar files, Client.jar and Update.jar , which are designed to download multiple files from a specific URL.
The malware is served up as an updated version of Java in an attempt to trick people into installing it.
“Using Google Code to distribute malware seems to be in vogue, and it’s due not only to the free hosting provided by Google, but also to the reputation of the google.com domain,” Zscaler’s Pradeep Kulkarni said in a blog post.
He added: “Businesses and end users should check the content they download from any third party, regardless of the domain, all files should be scanned.”
