More than 1 million large websites are attacked?

According to Dancho Danchev, a security expert, hackers are opening a "total attack" campaign aimed at the Internet, with the number of Web sites hit by more than 1 million. Among these, there are also very popular websites like USAToday.com, Target.com and even Walmart.com.

" The number and importance of hacked sites is increasing day by day, " Danchev said on his blog.

The criminals behind this attack did not hack straight into the server, but they took advantage of Web programming errors to install malicious code into the search results pages created by the website's search engine.

For example, the attacker will scour the popular keywords, like Paris Hilton on the internal search engine of the target website.

But instead of performing a normal search operation, he will put an HTML statement at the end of the search keyword.
This will open an invisible iframe window inside the victim's browser, then direct the browser to another malicious website.

Then, the hacker will try to install fake antispyware or Zlob trojan on the victim's computer.

Poisoning search engines

Search engines like Google are exploited by hackers and "quit poisoning".Source: AP

To increase your rankings on Google, websites often save a "search results" copy and send it to Google.

When a user unfortunately searches for that same keyword on Google, the search results have been "hacked" to jump out, accompanied by malicious code inside.

" Cybercriminals are actively poisoning search engines. They find ways to make their links appear in the first Top 10 results and consequently anyone who clicks on them will be infected with malware. " , Mr. Danchev said.

According to Danchev, the number of websites being exploited has reached more than 1 million, in the disbelief sales of many people.

" The higher the number of keywords that sites send to Google, the higher the risk of" sticky "users.

Who thinks that the search results that are deposited on reputable websites like USAToday also contain malicious code? "

According to him, websites that have been attacked by hackers can check their search engine and make sure there are no malicious code.