The Google Groups prOn invasion continues

Groups123888818a

Groups123888818an

Groups123888818anb

And even for Italian SEO:

Groups123888818

Pattern is the same as the other bunch I blogged about earlier today — these pages push other porn pages for profit. While not all of the redirects go to malware sites, we did observe redirects to a site which ultimately pushes a fake codec trojan, which if installed, results in a VirusHeat infection.