Google+ opens new security concerns - Trend Micro

MANILA, Philippines - Google+ is the latest attempt by Internet services giant Google to tap into the global social networking phenomena and to challenge the dominance of Facebook with its 750 million users. Since its introduction in June 28 on a “limited” trial phase, Google+ has already reached 10 million subscribers and continues to grow.

The newly hatched Google+ community stems from the existing user base of one of Google’s prominent services, Gmail, its popular free e-mail account. It also incorporates the functions of Google’s other products such as YouTube, Picasa, Google Calendar and Documents, and Android.

The opportunities of Google+ to rival even Facebook could be extensive since its most popular service, Gmail, already has at least 193 million active subscribers.

The convenience of building a social network could also potentially rival Facebook, especially as it taps users who are using devices with the Android OS, which has at least 100 million active units.

The integration of existing Google services with Google+ enables users to immediately start interacting with people within their existing links, unlike in other popular social networks such as Facebook and Twitter where people have to build their networks from the ground up. This quick interaction lessens the hassle of manually inputting friends into Google+ and can be done by sending out invites through “+1.”

New service, same dangers

But these opportunities could be equally marred by certain risks. Cybercriminals could already be hard at work to try and exploit the wave of users who want to be part of the Google+ community.

Just recently, experts from software security firm Trend Micro have found a scam website attempting to leverage on growing requests for more Google+ invites.

The site claims to give visitors more downloadable invites that would allow them to sign up to the network. The site would ask seemingly legitimate questions to visitors prior to giving out the invite, which, in reality, is an attempt to trick the visitor into thinking that they are in a secure site.

A list of surveys will be shown as part of the appeal. When the user closes the survey list, he or she is then directed to a file-sharing website which gives the user two options, either continue to answer the survey before downloading the free invites or to pay a pre-determined amount.

At the end of the survey, the user will then be asked for his or her telephone number. If users give out their numbers, the site would then subscribe them to certain clubs that would charge them daily for each text message that they receive on their phones. Lastly, the user will not get the promised Google+ invites at all.

Shape of things to come

Trend Micro fraud analyst Karla Agregado said this scam is not a serious concern as of the moment but it is an indication of things to come.

She said the recent scamming strategy on Google+ users has been in use for years and is usually used during the introduction of new online services.

In fact, it has been exploited numerous times against users of Facebook. Scammers attempt to charge users for useless services by tricking them into believing that they are getting legitimate services.

Agregado also warned that other forms of attacks could happen on Google+, such as malicious applications, phishing and fake antivirus.

“We already know how Facebook ended up fitting right into cybercriminals’ plans with the numerous attacks targeting the social network. Considering this recent development, it’s possible that Google+ will have the same fate as Facebook,” said Agregado.

The Philippines, with its huge Facebook community of over 22 million, is among the countries that are vulnerable to online scams.

The success of earlier social networking services, such as Friendster and then later Facebook, already indicates that Filipinos could be a potential market for Google+.

Citing a March 2011 report by research firm comScore, Agregado said nearly half of the Internet population in the Philippines is between 15 and 24 years old and remains to be the fastest growing segment. This relatively enticing market of young Filipinos is enough to draw attention from cybercriminals.