Al Gore
Hackers have inserted links into the source code of Al Gore's website

Spammers hack Al Gore's climate site

Attack shows interesting Google hacking technique

Written by Iain Thomson

Al Gore's Climate Crisis website has been hacked by spammers using an interesting technique to affect Google's rankings.

Hackers inserted links into the source code of the web pages of Gore's site.

These links were not visible to regular users as they were buried in the source code, but they were picked up by search engine software to affect the position of another site altogether.

"The fact that Al Gore's site got hacked or compromised, while definitely of significance, uncovers a much bigger technique now being used by spammers," said Vikram Thakur, of Symantec's security response team.

"The hackers were able to get to the top of the search results by creating links such as these. No one visiting the hacked site would have noticed or been affected by any malicious program. Not yet anyway."

Using this technique, and by posting comments on forums using an automatic generator, the team was able to move its bogus pharmaceuticals site up near the top of the search engine rankings.

Thakur fears that a vulnerability in WordPress web publishing software has left many bloggers open to attack by the same method.

"We have seen the spammers go from comment spamming to hacking WordPress, to injecting links, to getting top listing on the search engine results, to marketing pharmaceutical sites through a large network of interwoven links," he said.

"So far, the only visible damage is for the administrators of the servers with the hacked WordPress.

"This could have been much worse had the hackers decided to insert links to malicious programs. Fortunately, the 'kerching' of cash trumps notoriety."

Tags:

Further reading

Companies warned over DoJ spam

Attachment contains nasty Trojan   More...

Botnet hacker faces 60 years in jail

Security professional admits to fraud and wiretapping charges   More...

Russian hacker network goes underground

Russian Business Network ups sticks, probably to Asia   More...

Phishing scam taps Salesforce data

Customers being bombarded with attacks   More...

Related articles

Hackers set up stolen FTP account trading floor

Database discovered containing more than 8,700 harvested FTP account details   More...

Storm clouds gather again

Reports of death exaggerated   More...

Hackers step up search results attack

Big-name sites compromised in IFrame redirect scam   More...

Hackers eye open source coding tools

Security firm warns of 'cross-build injection vulnerability'   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

04 Jul 2008

5.51 MBPodcast Special: Views from the Valley More...

03 Jul 2008

3.46 MBGreen grid computing, Trojans stop play and location-based services More...

02 Jul 2008

3.2 MBOnline TV, SME security and flexible laptops More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Online pornography

US rebate cheques spent on porn

Economic stimulus package works wonders   More...

Louis Vuitton

UK online fake goods market worth £800m

Legal experts warn of dramatic rise in 'e-fencing'   More...

Advertisement

Fibre-optics

New fibre-optic connections overtake cable

Broadband first-timers choosing fibre where possible   More...

Stars and Stripes

Cyber-crooks celebrate Independence Day

Security firms warn users to take extra care   More...

Advertisement