• Articles
    • Editorial Articles
    • Research Articles
    • WatchGuard Articles
  • Daily Security Bytes
  • The 443 Podcast
  • Threat Landscape
  • About
    • About Us
    • Contact Us
    • Contribute to Secplicity

Secplicity - Security Simplified

Powered by WatchGuard Technologies

Scummy attackers preying on Japanese disaster for a buck

March 16, 2011 By Corey Nachreiner

Unfortunately, it almost goes without saying in this day and age; when some big event or unfortunate disaster happens, scummy malware pushers will jump all over it in hopes of enticing the news hungry masses to malicious sites and downloads. This unfortunate trend hasn’t failed to disgust me yet again with Japan’s recent earthquake and nuclear catastrophes.

Within hours of the first earthquake, scammers had already launched malicious campaigns to lure the worried global audience to phising sites masquarading as aide sites, and had also started  massive spamming campaigns targeting donors who want to help Japan.

 One of the techniques attackers increasingly use in these situations is called Black Hat Search Engine Optimization (SEO). This is a technique where attackers leverage the same SEO methods marketers use to get their web sites to prominently display with certain search results; only the attacker falsely links popular search phrases to a malicious site. Attackers are aggressively leveraging these Black Hat SEO techniques to tie their malicious phishing sites to the Japanese earthquake disaster. So you should definately be careful when searching for earthquake news on Google and other search engines.

I have a strong personal tie to Japan. I lived there for four years in the 80s, when I was younger. Many of my childhood memories are distinctly Japanese. So when I hear about these despicable criminals trying to make a buck off a country’s pain… well, I can’t really put to words how angry I feel. That’s why I want to make sure these crooks don’t succeed. As you receive email about the Japan disaster, or search for the latest information, please be wary of the links you click. While I encourage you to help out in some way, you should also be careful of who you are donating to. Finally, tell all your friends about these potential scams. If we all band together, maybe we can prevent these hoodlums from profiting from Japan’s pain. – Corey Nachreiner, CISSP

Share This:

Related

Filed Under: Security Bytes Tagged With: Black Hat SEO, Japan earthquake, Malware, nuclear disaster, scam, spam, tsunami

Comments

  1. Justin says

    March 16, 2011 at 3:44 am

    Very well said, I agree completely…

    Reply
  2. Mike says

    March 16, 2011 at 7:39 am

    I’ll make sure to forward this to as many people as I can. Hopefully it helps.

    Reply
  3. Anthony says

    March 16, 2011 at 9:03 am

    I too have connections with Japan, as I have very dear and close friends living in Tokyo. So I empathise with your feelings toward these “scummy attackers” as they would add to the misery and hardship of the Japanese people by funneling our money into their pockets instead of allowing it to go to those who need it most.

    Reply
  4. Corey Nachreiner says

    March 20, 2011 at 11:50 am

    I hope you have found your friends well. I’m thankful to share that my friends are accounted for. A few Tokyo based friends have flown to Okinawa for awhile, just to avoid the worst. Also, we’re happy that all WatchGuard staff in Japan are safe. ^_^

    Reply
  5. wpkube.com says

    April 9, 2014 at 5:22 pm

    Hi there. Thank you for the impressive article.
    Perfect guidance and exactly like what I am hunting for a very long time.
    Pleased to find this article and I had shared on a number of social bookmarking platforms.
    I have bookmarked this too for future reference as well.
    Sustain the good work.

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

The 443 Podcast

A weekly podcast featuring the leading white-hat hackers and security researchers. Listen Now
the 443 podcast

Threat Landscape

Filter and view Firebox Feed data by type of attack, region, country, and date range. View Now
threat landscape

Top Posts

  • USA’s Answer to GDPR
  • Rolling PWN
  • Hacker Summer Camp 2022

Email Newsletter

Sign up to get the latest security news and threat analysis delivered straight to your inbox

By signing up you agree to our Privacy Policy.


The views and opinions expressed on this website are those of the authors and do not necessarily reflect the policy or position of WatchGuard Technologies.

Stay in Touch

Recent Posts

  • Hacker Summer Camp 2022
  • Private Sector Offensive Actors
  • USA’s Answer to GDPR
  • Rolling PWN
  • Over a Billion Records Leaked in Shanghai National Police Database Hack
View All

Search

Archives

Copyright © 2022 WatchGuard Technologies · Cookie Policy · Privacy Policy · Terms of Use