Many Rogue SEO attack sites will only work if the referrer is from a Google query.

If the URL is visited from other source, the potential victim, will be directed away from the scareware. So where is it that the bad guys are currently forwarding non-Google visitors? CNN.com.

This video demonstrates with a recent Google trend:

Rogue sites redirect to CNN.com via our YouTube channel.

On 19/04/10 At 04:46 PM

View full post on F-Secure Antivirus Research Weblog

• The Increasingly Shapeshifting Web
  Short URL services are problematic, and they are becoming even more so in combination with IP location technologies.From twitter.com earlier today:If you look closely, you'll notice it's one spambot, ...
• Hundreds of College and Government websites still redirecting to fake stores
  In January, I talked about high-profile websites, which had been hacked to redirect users to fake online stores. One unique aspect of the hack was the fact that the attackers had set up additional web...
• Highly Targeted Attacks and the Weakest Links
  Here at Trend Micro, we have seen all kinds of cybercrime and digital threats. For the first-ever Cybersecurity Awareness Day in Singapore, one of my colleagues, Richard Sheng, has taken time out to e...
• Popular Polish government Web site Opole.pl injected with Pharmaceutical links
  Web sites don't necessarily have to be injected with malicious code (the kind of code that ends up delivering exploits to the user’s browser). In fact we see a LOT of Web sites that are inje...
• Turning scareware devious distribution tactics into practical protection mechanisms
  Fake anti-virus software (also known as scareware, rogueware or "FakeAV") is without doubt one of the most significant threats today. Bogus security warnings adorned with flashy images and incessant p...
• Vodafone data leak – a long chain with several weak links
  Hi folks, On Jan 9th, the Sydney Morning Herald ran a very interesting story about millions of Vodafone customers having their data leaked. The article is slightly misleading, albeit probably uninte...
• Links and resources for malware samples
   Here are good resources, links, download locations for malware. Use caution. http://forums.malwarebytes.org newest malware threats http://forums.malwarebytes.org newest rogue threats http://www.ker...
• Scareware SEO attack exploits engagement of Prince William and Kate Middleton
  Yesterday, the news wires were hot with the announcement of the engagement of Prince William to Kate Middleton. As ever with hot news stories, one thing is inevitable. It is just a matter of time befo...
• Fake browser warnings dupe users into downloading ‘scareware’
  Scammers are spoofing the anti-malware warnings of popular browsers to dupe Windows users into downloading fake security software, according to Symantec. View full post on Computerworld Security Ne...
• Websense Insight: Link Analysis – What links are people sharing on Facebook and Twitter?
  With millions of Tweets and Facebook postings flying around daily from personal and business users, have you ever wondered where the links in these postings go?In this Websense Insight we have analyze...