Massive AdSense fraud campaign infects 10,000+ WordPress sites
By MYBRANDBOOK
The threat actors behind the black hat redirect malware campaign have scaled up their campaign to use more than 70 bogus domains mimicking URL shorteners and infect over 10,800 websites. The campaign is said to have been active since September last year and is orchestrated to redirect visitors to compromised WordPress sites to fake Q&A portals. The goal is to increase the authority of spammy sites in search engine results.
"The main objective is still ad fraud by artificially increasing traffic to pages which contain the AdSense ID which contain Google ads for revenue generation," Sucuri researcher Ben Martin said in a report published last week.
The details of the malicious activity were first exposed by the GoDaddy-owned company in November 2022.
What makes the latest campaign significant is the use of Bing search result links and Twitter's link shortener (t[.]co) service, along with Google, in their redirects, indicating an expansion of the threat actor's footprint.
"It's possible that these bad actors are simply trying to convince Google that real people from different IPs using different browsers are clicking on their search results," Sucuri noted at the time. "This technique artificially sends Google signals that those pages are performing well in search."
Though it is not known precisely how the WordPress sites become infected in the first place, but once the website is breached, the threat actor injects backdoor PHP code that allows for persistent remote access as well as redirect site visitors.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
AMARA RAJA POWER SYSTEMS LTD.
SAFE SECURITY SERVICES PVT. LTD.
INFOSYS TECHNOLOGIES PVT. LTD.
PRAMA HIKVISION INDIA PRIVATE LIMITED
ICONS OF INDIA : SHAILENDER KUMAR
Shailender Kumar is senior vice president and regional managing direct...
ICONS OF INDIA : RITESH AGARWAL
Ritesh Agarwal is an Indian billionaire entrepreneur and the founder a...
Icons Of India : ASHISH KUMAR CHAUHAN
Ashish kumar Chauhan, an Indian business executive and administrator, ...
C-DAC - Centre for Development of Advanced Computing
C-DAC is uniquely positioned in the field of advanced computing...
NSE - National Stock Exchange
NSE is the leading stock exchange in India....
BEL - Bharat Electronics Limited
BEL is an Indian Government-owned aerospace and defence electronics co...
Indian Tech Talent Excelling The Tech World - Shantanu Narayen, CEO- Adobe Systems Incorporated
Shantanu Narayen, CEO of Adobe Systems Incorporated, is renowned for h...
Indian Tech Talent Excelling The Tech World - Dheeraj Pandey, CEO, DevRev
Dheeraj Pandey, Co-founder and CEO at DevRev , has a remarkable journe...
Indian Tech Talent Excelling The Tech World - ARVIND KRISHNA, CEO – IBM
Arvind Krishna, an Indian-American business executive, serves as the C...