28 Nov 2007
Al Gore's Climate Crisis website has been hacked by spammers using an interesting technique to affect Google's rankings.
Hackers inserted links into the source code of the web pages of Gore's site.
These links were not visible to regular users as they were buried in the source code, but they were picked up by search engine software to affect the position of another site altogether.
"The fact that Al Gore's site got hacked or compromised, while definitely of significance, uncovers a much bigger technique now being used by spammers," said Vikram Thakur, of Symantec's security response team.
"The hackers were able to get to the top of the search results by creating links such as these. No one visiting the hacked site would have noticed or been affected by any malicious program. Not yet anyway."
Using this technique, and by posting comments on forums using an automatic generator, the team was able to move its bogus pharmaceuticals site up near the top of the search engine rankings.
Thakur fears that a vulnerability in WordPress web publishing software has left many bloggers open to attack by the same method.
"We have seen the spammers go from comment spamming to hacking WordPress, to injecting links, to getting top listing on the search engine results, to marketing pharmaceutical sites through a large network of interwoven links," he said.
"So far, the only visible damage is for the administrators of the servers with the hacked WordPress.
"This could have been much worse had the hackers decided to insert links to malicious programs. Fortunately, the 'kerching' of cash trumps notoriety."
Latest stories from Software
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Low Latency Network Engineer, Senior Network Engineer...
SQL DBA - (North London) North London , £45k - 50k...
Business Architect – (North London) £65,000 – 75,000k...
Graduate Software Engineer - Javascript OR Android...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Not only links added
The attackers did not only add links to climatecrisis.net (and many other sites), they also added AdSense ads. The 'kerching' of cash is a powerful incentive.
Posted by: Nick Dalton 29 Nov 2007