As the old saying goes, if it ain’t broke, don’t try to fix it. <\/p>\n\n\n\n
Unfortunately, that applies to the tactics used by cybercriminals just as much as it applies to legitimate businesses. It’s why distributed denial of service (DDOS) attacks have been around for decades. And it’s why ransomware has changed so little over the years.<\/p>\n\n\n\n
Sure, we’re seeing more sophisticated distribution tactics, but ultimately modern ransomware works nearly the same as ransomware from a decade ago.<\/p>\n\n\n\n
With that in mind, it appears another blast from the past has started to re-emerge. At least a few of you probably remember the early days of search engine optimization (SEO). Back when search engines were akin to a virtual wild west, black hat tactics were the best way to rank. <\/p>\n\n\n\n
You likely also recall how many malicious websites rose to the top of the search engine results page (SERP), abusing SEO to serve poisoned results to users, hence the term SEO poisoning. <\/em>It didn’t take long for Google and other search engines to release algorithm updates that shut down most of the shadier tactics. But just like life, criminals always find a way. <\/p>\n\n\n\n Today, SEO poisoning takes a different form.<\/p>\n\n\n\n First, criminals create a website and take great pains to make it look as legitimate as possible. From there, they begin ‘trend chasing,’ leveraging their understanding of SEO in an effort to gain a prominent position on the SERP. There’s no limit to the number of keywords a single malicious domain may target in this manner.<\/p>\n\n\n\n