Advanced features in Google's search engine are being used by spammers to disguise the URLs of spamvertised sites. Hackers have been using Google search functions to hunt for vulnerabilities. Now their peers in the junk mail business are getting into the act, Symantec reports.
Google supports a variety of advanced query words that are capable of narrowing the scope of a search. Spammers have latched onto this functionality as a means to direct an end user to a URL advertising their products or services, without directly pointing at a site. The approach, as with so many in the field of spamming, is designed to bypass junk mail filters. Symantec came across the technique after coming across spam emails containing a URL that, on casual inspection, resembled a "Google search results" link. However, when clicked, the URL directs surfers to a site selling replicas of expensive watches, pens, and jewelry.
View: The full story @ The Reg
Google supports a variety of advanced query words that are capable of narrowing the scope of a search. Spammers have latched onto this functionality as a means to direct an end user to a URL advertising their products or services, without directly pointing at a site. The approach, as with so many in the field of spamming, is designed to bypass junk mail filters. Symantec came across the technique after coming across spam emails containing a URL that, on casual inspection, resembled a "Google search results" link. However, when clicked, the URL directs surfers to a site selling replicas of expensive watches, pens, and jewelry.
View: The full story @ The Reg
[google]http://www.google.com/search?q=unobtrusive+DX23...I=Google+Search[/google]
Takes you to Neobonds blog.
Sneaky.
EDIT: Is the linking system not working right? Here it is without the forum auto-url-ing
www.google.com/search?q=unobtrusive+DX2300+portsmouth&btnI=Google+Search
Last edited by markjensen on 06 Nov 2007 - 14:35
My example above uses the words "unobtrusive", "DX2300" and "Portsmouth" in the link, and can be used to spam Steve's blog page, even if you filter out things like "blog", "Neobond", "Steve" and "Neowin".
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.