Poisoned Search Results: How Hackers Have Automated Search Engine Poisoning Attacks to Distribute Malware

This paper describes recent research by Sophism Labs into how attackers are using black hat Search Engine Optimization (SEO) techniques to stuff legitimate websites with content designed to rank highly in search engine results, yet redirect users to malicious sites. These websites are being used to distribute rogue security products (also known as "Scareware" or "Fake Antivirus") onto users' computers. Sophism researchers have analyzed the malicious SEO kits used by hackers to create networks of thousands of cross linked pages containing search friendly content on hot trending topics, hosted on compromised, legitimate websites.

Provided by: Sophos Topic: Security Date Added: Mar 2010 Format: PDF

Download Now

Find By Topic