London Olympics Search Results Lead to Objectionable SitesDescription :
We’ve previously blogged about
Olympic ticket scams,
phishing,
malware designed to propagate through social networking, and other
Olympic security concerns.
We also know that hackers take advantage of people searching for breaking news and trending topics about the Olympics through various SEO poisoning techniques. When Georgian luger
Nodar Kumaritashvilii died in a tragic training accident just before the Vancouver Olympics in 2010, multiple malware pages quickly appeared in the top search results. Clicking these links led to pages that included pop-up warnings telling the user to click a button to view a video or to clean up computer problems. Of course, clicking led to malware attacks.
SEO poisoning remains a problem, but Google seems to have a better handle on it where searches related to the London Olympics are concerned, at least in English. When we started using Russian search terms, however, things deteriorated quickly. Using the Russian translation for "watch 2012 Olympics online", we did a Google search and clicked on the second item:<span style="font-family: 'Segoe UI'; direction: ltr; color: #000000; font-size: 10pt;"]</span>
<img alt="" border="0" src="http://community.websense.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/3187.Russian-google.jpg" />
While the domain itself is correctly categorized as sports, it's clear some objectionable content is popping up in the ads:
<img alt="" border="0" src="http://community.websense.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/4403.russian-results.jpg" />
In addition, clicking on the page redirects to various questionable places, including information on how to control men:
<img alt="" border="0" src="http://community.websense.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/7536.russian-ad.jpg" />
In another investigation, Websense® researchers analyzed Twitter traffic based on popular Olympics-related terms, events, and athletes starting two days before the Opening Ceremony through August 8th. Not surprisingly, traffic peaked on the day the Games opened, and three days later when Olympians Tom Daley,
<span class="hottrends-single-trend-news-title"]<span style="color: windowtext; text-decoration: none;"]</span></span>Michael Phelps, <span class="hottrends-single-trend-news-snippet"]Ruta Meilutyte, and Maria Sharapova topped the Google trends.</span>
<img alt="" border="0" src="http://community.websense.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/2678.Traffic.jpg" />
Looking more closely at the data, we found that a handful of Twitter feeds from certain athletes and teams were posting shortened URLs which redirected to Objectionable or Security categories, including Malicious Web Sites and Malicious Embedded Link:
<img alt="" border="0" src="http://community.websense.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/0310.olympicsblog.jpg" />
We took a sample set of 3600 of these, unshortened them, and analyzed the category breakdown:
<img alt="" border="0" src="http://community.websense.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/1057.chart.jpg" /><p class="MsoNormal"]<span class="hottrends-single-trend-news-snippet"]<span></span></span><span style="font-size: 10.0pt; line-height: 115%; font-family: 'Cambria','serif';"]</span>
<span class="hottrends-single-trend-news-title"]</span>
Websense customers are protected from these threats by our Advanced Classification Engine™ (
ACE).
<div style="clear: both;"]</div>
Lien : http://community.websense.com/blogs/securitylabs/archive/2012/08/10/London-Olympic-Searches-Resulting-In-Objectionable-Sites.aspx
