Blog

Google Release New Spam Bot In Form Of Google Plus

by

There has been a huge amount of hype surrounding the release of Google Plus, a social networking addition to their already robust portfolio and the main reasoning behind the Google +1 buttons that have begun to be implemented across search engine results pages and websites across the globe.

Well with so much anticipation to see exactly what Google have been able to create, once given the chance to sample the experience that many are yet to learn of but within minutes of access, the first problem has already raised its ugly head.

Testing of the Google Plus site has revealed that the latest offering from the online giants is a cloaked version of a spam bot that potentially is going to cause issues for millions of online email users.

So where does the problem arise?

The fact that Google Plus allows non Google Mail accounts to be placed into the contacts list within the site has opened up a huge security issue for email users based on the fact that Google have allowed you to share anything that you wish with huge contact lists, regardless of whether they use Gmail or not.

Here is an image of the screen box that you are presented with when you select to share something with your contacts, make sure to take note of the highlighted area as this is the extension of your ‘social circle’.

The adding of comments, links, videos and pictures has now become easy for those who are looking to use the site but the danger begins when malicious spammers begin to breach the Google Plus homepage and begin to share Trojans, viruses and botnets cloaked within links.

Okay so this isn’t anything different than when you open your inbox and have offers from senders that are looking for someone to hold millions of pounds for them following the death of a prince far away, well other than the fact that you send the share to people outside of your contact list, but the real issue is the inability to unsubscribe from the email alerts if you are not a Gmail user.

This is the same email that every person within the contact list of any sent email receive but it seems that Google have failed to realise that their un-subscription link offers very little to anyone that is not a user of their Gmail service.

We have tested this here and when a share is revealed to an email address that is not Gmail based, they are unable to opt out of the email alerts, instead receiving a Google 404 page.

Google are known to want to try to make ground within the social networking world but with Google Plus functioning in the way that it does at the moment, they need to either act quickly and sort out the 404 issue or they need to eliminate the ability to include email addresses outside of Gmail.

Either way, at the moment Google could just have unwillingly created one of the biggest spam bots on the internet and one that offers the additional danger of being unable to opt out of the updates.

19 Comments

  • Bob 692 days ago

    your email is open to the world, so it is all right if someone who knows your email id adds you in google circles. If your email spam filtering is not that great, then switch to gmail which has the best anti-spam techniques

    Reply
  • David Meerman Scott 692 days ago

    http://www.webinknow.com/

    I was thinking the same thing. It seems that Google+ will have huge spam issues. But I’d be surprised if the smart people at Google have not sorted those issues out.

    Reply
  • Carps 691 days ago

    http://www.search-watch.com

    Ouch. Major fail there. Set up a Gmail account, dump in a million email addresses for a ‘contact list’ and start doling out the spam via Google+. Might pass an afternoon!

    Reply
  • Claus 691 days ago

    http://www.koaladesigns.dk/

    I had exactly theese thought when I used Google+ and noticed the option to send to non Google+ mails.
    but as stated above, Im sure Google will have this fixed quite fast

    Reply
  • Paul Gailey 691 days ago

    http://paulgailey.com

    i think precisely because these kind of issues don’t get surfaced in the dogfooding phase is why Apps Users are being excluded for the time being. There is just too much risk to Google to fail on this one. Buzz never recovered and this is really the last social roll of the dice for Google. At least the reception hasn’t been a WTF as with Wave which bodes well.

    The question is how rapidly can they nip these issues in the bud and placate the growing Apps dissatisfaction at the situation. Facebook will try to out innovate them with revised interfaces and features and meanwhile Google risk users creating duplicate profiles with Gmail to then do the same with Apps email when enabled. That will cause a mess, especially if Profile portability is not enabled. Oh and what about preventing/discounting Apps +1 abuse? Yes, that lot at Mountain View must be busy.

    Reply
  • Nathan 691 days ago

    http://nathanmabry.com

    I’m glad I’m not the only one who noticed this. I sent this “tip” to Mashable yesterday with hopes they would eventually cover this (as I don’t have a platform myself).

    Even Gmail users have to take an intermediate step to unsubscribe from something they did not initially ask for. I simply shared 1 item with some colleagues with the thought that they’d like to get in on Google+. I followed up with the same “Circle” in trying to start a Huddle. Within 10 minutes, I’ve got a Gtalk message from one of the individuals asking me to stop spamming them. This can grow to be something serious and will take great responsibility on the part of Google+ users (unfortunately, we can’t trust them all).

    Reply
  • [...] Maybe tricky. The main entry point is Gmail – but that’s a pretty distant third behind Hotmail and Yahoo. Allowing members to invite non Gmail users is the best bet (although problematical already) [...]

  • Betonsky 691 days ago

    http://www.goodrep.blogspot.com

    This is stuff I wouldn’t expect

    Reply
  • David Bennett 691 days ago

    http://quillcards.com/blog/

    Have you told Google?

    Reply
  • David Naylor 691 days ago

    @david bennet I used the form on google+ that count

    Reply
  • Nick Burch 691 days ago

    I’ve tried reporting the same thing to google, via there privacy contact, and via their forum ( https://groups.google.com/a/googleproductforums.com/forum/embed/?place=topic%2Fgoogle-plus-discuss%2FnnMsYdiU0pQ%2Fdiscussion#!topic/google-plus-discuss/nnMsYdiU0pQ/discussion ) but they’ve been strangely silent all day on it. You’d have thought that Google would know better than to have broken unsubscribe links like this, but it seems not…

    Reply
  • konisewu 691 days ago

    can some one please gimmi a disposable mail that works for more than 1 month

    Reply
  • Nobody Special 691 days ago

    How, exactly, is using google+ for spamming any different from using gmail? I can’t opt-out of receiving emails from somebody sending them straight from their gmail account, and it’s just as easy to create giant contact lists in gmail as it is in google+.

    You can’t do anything with google+ that you can’t already do using any webmail service.

    Reply
  • Ravinder Negi 690 days ago

    http://ravinders_negi@yahoo.co.in

    this is look very exciting i m waiting for that new google plus launch

    Reply
  • Amy 690 days ago

    I have a gmail email address and I get the 404 page when I try to unsubscribe so it’s not just limited to non gmail users, very democratic of them! and very irritating!

    Reply
  • David Gerard 689 days ago

    http://newstechnica.com
    Reply
  • Amy 688 days ago

    I just tried again to unsubscribe and no more 404 error, hooray!

    Reply
  • Gabi 687 days ago

    If you realy want people to read your blog, than please:
    INCREASE THE COLORS AND SIZE OF THE FONTS !!!

    I got a headache after 2 sections, man…

    Reply
  • Beric 686 days ago

    http://www.fabfive24.com

    I am sure that Google will work this problem out. And will find a solution to this! I guess we will see a result soon!

    Reply

Write your comment

Optional

The Bronco Family
Work With Us