Hacker
Hackers are embedding compromised web pages with lists of popular search terms

Hacked page hauls estimated at $10,000 a day

Referral scams netting big bucks for criminals

Shaun Nichols in San Francisco

The recent wave of search engine optimised web attacks is netting a huge cash haul for hackers and malware vendors, according to researchers.

Security firm Finjan claimed that a single hacker can make as much as $10,800 (£7,400) a day by embedding compromised web pages with links to attack sites and lists of popular search terms.

Advertisement

Finjan chief technology officer Yuval Ben-Itzhak said that the company recently observed a single attack operation involving a set of compromised pages that redirected to a site pushing a rogue anti-virus program.

The attackers had compromised a series of pages which were then embedded with lists of popular search terms collected from services such as Google Trends or current news items. The same pages were then injected with obfuscated code that redirected to the attack page, which used fake alert boxes to convince the user to download and purchase the bogus security software for $50 (£34).

Over a period of 16 days, Finjan recorded some 1.8 million hits from the infected pages. Between seven and 12 per cent of the victims actually downloaded and installed the software, and roughly 1.79 per cent paid the $50 fee.

Finjan estimated that the sales generated a haul of around $191,000 (£131,000) from a single attack operation. Using common referral rates of roughly 1.6 cents each, Finjan also estimated that the cut of the profits being paid to the hackers was $172,000 (£118,000) over the course of 16 days.

Perhaps most troubling is the ease with which these operations can be performed. Ben-Itzhak said that the operation his company observed was likely to have been run by one or two people, and required relatively little knowledge or skill.

"Everything is being done automatically. They're using automatic tools to compromise the web site and it isn't hard to find keywords," he explained. "You don't need to have a PhD to set this up, and that is why it is so successful."

The current economic crisis has led many security experts to worry that cyber crime will surge in the coming months and years, as users turn to the web for job opportunities and bargain shopping.

Other reasons for the growth in cyber crime are increasingly sophisticated attack techniques, and the availability of easy-to-use tools which enable criminals to make quick money.

"These numbers clearly indicate why cyber crime continues to grow," said Ben-Itzhak. "You can see the numbers, you can see how successful it is, and there is no reason to think it will die."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Hacker

Hacker cracks fully patched Safari in two minutes flat

Safari, Firefox and IE all fail in hacking competition

Credit card

Online fraud up, but rate of growth slows

New Apacs figures show card not present fraud totalled £328m in 2008

Security experts warn of 'terror attack' spam

Bogus 'bomb scare' emails add unsuspecting users to Waledac botnet

Top 10 worst things about the web

A collection of online annoyances we all could do without

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Windows 7

Microsoft denies Windows 7 battery problems

Replacement warning functioning normally, claims software giant

Safer Internet Day

Safer Internet Day highlights online threats

Annual initiative warns of phishing, ID theft and social network...

AMD Fusion

AMD details Fusion innovations at ISSCC

Forthcoming chip with four CPU and one GPU cores will...

MSI Wind U135

Review: MSI Wind U135 netbook

A decent netbook incorporating the latest Intel technology in a...

Primary Navigation