Sign In

Communications of the ACM

ACM TechNews

Hackers Exploit Websites to Give Them Excellent SEO Before Deploying Malware

View as: Print Mobile App Share:
A hacker at work.

Cyberattackers have turned to search engine optimization techniques to deploy malware payloads to as many victims as possible.


Cybersecurity researchers at Sophos have found that hackers are using search engine optimization to push compromised websites higher up Google's rankings and more widely deploy malware payloads.

The "Gootloader" technique involves deploying the injection framework for the Gootkit Remote Access Trojan, which researchers said would require the maintenance of a network of 400 or more servers at any given time.

The researchers said hackers are gaining access to websites' content management systems via malware, stolen credentials, or brute-force attacks, after which they insert a few lines of code into the body of website content.

The compromised websites are manipulated to answer specific search queries, displaying fake message boards with posts containing an answer to the query and a direct download link.

Gootloader is being used to deploy malware variants including the Gootkit banking Trojan, Kronos, Cobalt Strike, and REvil ransomware in the U.S., South Korea, Germany, and France.

From ZDNet
View Full Article


Abstracts Copyright © 2021 SmithBucklin, Washington, DC, USA


No entries found

Sign In for Full Access
» Forgot Password? » Create an ACM Web Account