Wednesday December 3, 2008 8:35 AM AEST
Latest Comments
"trend is good antivirus software."
by jack | Dec 3, 2008 7:02 AM
 
"I feel it with you guys. These irritating interruptions on privacy MUST be stopped. It is a ..."
by Jan Wilmans | Dec 2, 2008 7:11 PM
 
"My AVG WILL NOT UPDATE"
by James Downs | Dec 2, 2008 5:58 AM
 
"Concerned man's comments seem to intimate that if I'm using agents all will be well but the ..."
by Werner K | Nov 26, 2008 8:36 PM
 
"That will enhance Microsoft Office system, including SharePoint - good platform for enterprise ..."
by SGE | Nov 25, 2008 3:29 PM
Web

Spammers hack Al Gore's climate site

  • Email a Friend
  • Print Page
Spammers hack Al Gore's climate site
By Iain Thomson
Nov 29, 2007 10:04 AM
Tags: Spammers | hack | Al | Gore's | climate | site
Hackers inserted links into the source code of the web pages of Gore's site.

These links were not visible to regular users as they were buried in the source code, but they were picked up by search engine software to affect the position of another site altogether.

"The fact that Al Gore's site got hacked or compromised, while definitely of significance, uncovers a much bigger technique now being used by spammers," said Vikram Thakur, of Symantec's security response team.

"The hackers were able to get to the top of the search results by creating links such as these. No one visiting the hacked site would have noticed or been affected by any malicious program. Not yet anyway."

Using this technique, and by posting comments on forums using an automatic generator, the team was able to move its bogus pharmaceuticals site up near the top of the search engine rankings.

Thakur fears that a vulnerability in WordPress web publishing software has left many bloggers open to attack by the same method.

"We have seen the spammers go from comment spamming to hacking WordPress, to injecting links, to getting top listing on the search engine results, to marketing pharmaceutical sites through a large network of interwoven links," he said.

"So far, the only visible damage is for the administrators of the servers with the hacked WordPress.

"This could have been much worse had the hackers decided to insert links to malicious programs. Fortunately, the 'kerching' of cash trumps notoriety."

Copyright © 2008 vnunet.com

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
Vulnerabilities & Exploits Whitepapers