A blog set up to promote former US Vice President Al Gore's film, "An Inconvenient Truth," has been hacked and is hosting links to Web sites hawking online pharmaceuticals.
The links appear to have been created as part of a scheme to boost the Web traffic for sites that promote the drugs, security experts said Monday. They contain titles such as "Xanax On Line," "Viagra," and "Buy Valium Online."
Cyber scammers have been using this technique for months now, packing hacked Web sites with links to their products in hopes of bumping up their rankings on search engines such as Google and Ask.com. Another similar tactic, known as "comment spam," involves flooding the comment sections of Web sites with these types of links.
Because search engines give priority to pages that are linked to by very popular pages, adding links from the Inconvenient Truth blog would be a bonanza for scammers, according to Adam Thomas, a malware researcher at Sunbelt Software. The film's blog has "such a high page ranking that they use that as sort of conduit to ... gain a really high Google page rank, and hope that they can find some suckers to buy some medications online," he said.
The climatecrisis.net domain, which hosts the blog, is registered to Al Gore, the star of the 2006 Academy Award-winning documentary on global warming. Not all pages on the site appear to have been compromised, security experts say; just those associated with the blog.
Though the drug-promoting links can be seen by the crawler software used by search engines, most visitors wouldn't even know that they exist. On Monday, they couldn't be seen on the Web page itself, but were visible in the blog's source code -- which only the people who maintain the Web site should be able to alter. The links point to Web pages on a site run by Westmont College, a small Christian college based in Santa Barbara, California. The Westmont College Web site also appears to have been hacked, Thomas said.
The hacked Westmont pages are in an early stage of development, but some of them were hosting blog pages that could ultimately be used to host ads for the drugs or even to link to other sites that actually sold the pharmaceuticals, Thomas said.
Thomas said attackers were most likely able to gain access to the blog by exploiting flaws in the WordPress Web publishing software used by both the Inconvenient Truth blog and Westmont College. Representatives for Al Gore and Westmont College could not be reached immediately for comment.
Once they gained access to the site, criminals could have easily added malicious exploit code to the blog, and that code could have been used to infect visitors' PCs with computer viruses, said Roger Thompson, chief technology officer of Exploit Prevention Labs. "It just shows how tricky it is to secure a Web site," he said. "I think we're a bit lucky it's not shooting exploits."
Linus Larsson of Computer Sweden contributed to this story.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Mimosa™ NearPoint™ for Microsoft® Exchange Server: Email Archiving 101
Best Practice in Building an Integrated Information Management Strategy
Enterprise Wireless WLAN Security
Solve Exchange Mailbox Storage Issues Once and for All
Email Archiving Implementation: Five Costly Mistakes to Avoid
Email Archiving 101—Customer Case Study
Taking On Demand CRM Integration to the Next Level
Know thy self: Reduce costs, secure data and ensure compliance with identity management
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Vignette Announces 2008 Excellence Awards 2008-11-21 10:50:00+11
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 2008-11-20 17:34:00+11
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 2008-11-20 12:06:00+11
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 2008-11-20 12:04:00+11
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 2008-11-20 12:02:00+11
Data grids and service-oriented architecture
When choosing an SOA strategy, corporations must ensure data availability, reliability, performance and scalability. A data grid infrastructure, built with clustered caching provides a framework for improved data access that can create a competitive edge and sustain customer loyalty. Read on to discover how this can be created within your organisation.









