Tag: Search Poisoning
-
Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign
The Unit 42 team at Palo Alto Networks has uncovered a large-scale search poisoning campaign dubbed Operation Rewrite, in which Chinese-speaking threat actors deployed malicious BadIIS components onto internet-facing servers and used compromised websites as reverse proxies to manipulate content and redirect traffic to fraudulent destinations. The activity involved the installation of both native IIS…
-
AI Chatbots Are Leading Users to Phishing Sites: New Report Reveals Dangerous “AI Search Poisoning” Threat
Despite the rapid advancements in chatbot technology, modern AI models still frequently err when asked to identify the official websites of well-known companies. According to researchers at Netcraft, these inaccuracies present fresh opportunities for cybercriminals, who may exploit AI-generated mistakes for malicious purposes. The researchers conducted tests on GPT-4.1 models, posing seemingly straightforward queries such…
-
Warning: New “Search Poisoning” Scam Injects Fake Support Numbers on Legitimate Brand Sites
Fraudsters have developed a method to intercept search queries from users seeking 24/7 customer support from companies such as Apple, Bank of America, Facebook, HP, Microsoft, Netflix, and PayPal. By posing as legitimate support representatives, they deceive individuals into divulging personal information or granting remote access to their devices. This warning comes from Jérôme Segura,…