Phishing has taken the next step up (or down, depending on how you want to look at it) the food chain: fake blogs as a source for malware:

Fortinet gives examples of the sites, including one for a supposed fan of the Honda CR450 motor car, which attempts to infect visitors with the Wonka Trojan. In another, the fake blog redirects visitors to a store front purporting to be Pharmacy Express, a phishing site that has turned up in many spam emails distributed by the Stration worm.

"These are not legitimate blogs that were compromised. They appear to be deliberately set up to promote phishing, which is against our terms of service. We are investigating, and blogs found to include malicious code or promote phishing will be deleted," Google said in a statement to CNET.

Splogs as a source of spam links are nothing new, but this takes things to a new level - especially given the ease of creating search feeds that bring these things directly to IE, Firefox, Safari, or Opera.

Technorati Tags: spam, malware