3

I clicked this link

http://girlsguidetosurvival.wordpress.com/

Chrome gave me this warning -

Attackers currently on bit.ly might attempt to install dangerous programs on your computer that steal or delete your information (for example, photos, passwords, messages, and credit cards).

Google Safe Browsing recently detected malware on girlsguidetosurvival.wordpress.com. Websites that are normally safe are sometimes infected with malware. The malicious content comes from bit.ly, a known malware distributor.

I thought bit.ly was a good company. And can they really steal my password/messages just if I visit a website and read some posts (if I'm not giving them any information)?

Is there a safe way to browse this website?

  • 1
    And as for why you get that message when visiting the blog it looks as though it uses single pixel images that redirect to this user stats service whos.amung.us through bit.ly. – Martin Smith Oct 25 '14 at 12:17
  • bit.ly is just a good link obfusticator and so therefore like most sites that do link shortening, their service is a magnet for malware distributors that want to disguise links to their infection engines and email phishing schemes that need something to hide behind. – Fiasco Labs Oct 25 '14 at 16:18
12

bit.ly itself does not distribute malware, bit.ly is just an URL shortener service which allows you to mask/shorten your original URL. bit.ly however is not only used for good reasons (shortener) and for marketing reasons (click tracking).

You have to think about scam and phishing websites as well, which often use bit.ly to hide their domain which otherwise would be blacklisted automatically by filter programs (or to override blacklists). This simple act of piggybacking hurts bit.ly because it offers a simple redirection, and Google interprets this (probably it has been triggered automatically from their systems) as bit.ly being part of a malware network.

This can be easily confirmed if you visit the Google Safe browsing diagnostic page for bit.ly

Of the 91854 pages we tested on the site over the past 90 days, 669 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-10-24, and the last time suspicious content was found on this site was on 2014-10-24. Malicious software includes 200 trojan(s), 185 exploit(s), 152 scripting exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine.

Malicious software is hosted on 365 domain(s), including xxxx.mobi/, xxxx.net/, xxxx.com/.

As you can see, Google associates bit.ly with each of these single domains.

To answer your question, you shouldn't worry about the bit.ly website itself and you can browse it safely, however when clicking to a shortened URL there's generally no way (for bit.ly specifically there's a way, check Sumurai8's comment below) to prevent you being warped into a scamming/phishing site.

You can take precautionary measures by using various extensions on your browser, especially ones which allows you to prevent to run javascript on unknown pages, adblock might be a good thing also to prevent scammers to generate any income from banners/ads placed on the malicious site. You can also block and analyze the bit.ly redirection before it triggers on your browser, so you can know which URL you are going to be redirected to.

On a rule of thumb I'll generally recommend the following:

  • Triple check the address bar, specifically the domain of the website
  • Check again on google if not sure
  • If it's a suspicious and dodgy page, leave and never come back, it might be good if you can blacklist and block it from being accessed again.
  • Don't download warez and free programs promising you hot girls, money or whatsoever.
  • For whatever service you use on the internet, if it involves serious personal stuff always use if possible a 2-way factor authenticator by attaching it to your mobile, this might dampen the probabilities from being scammed.
| improve this answer | |
  • 7
    In addition, if you encounter a bit.ly link, you can add a + behind the link to see it's statistics. The nice thing of these statistics is that you can see what the resulting url is. For example, you can see the statistics for this bit.ly if you go to here. You can google the resulting url or pull it through, for example, Norton's url checker: safeweb.norton.com – Sumurai8 Oct 25 '14 at 15:50
  • Wow, wasn't aware of the "+" trick! That's awesome, thanks – MacK Oct 26 '14 at 11:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.