Panda Labs has discovered over 1 million links with Ford-related anchor text that lead to malware dressed up as anti-virus applications. The user is berated with warnings from “MS Antispyware 2009” that they need to buy software to protect their computers. Of course, MS Antispyware 2009 is not an official Microsoft product and does pretty much the exact opposite of what it advertises.
Here’s what happens:
1. Internet user clicks on Ford link which leads to a video.
2. User must install a codec to watch video.
3. Once codec is installed, message pops up warning of Malware.
4. User is offered opportunity to purchase $79 anti-virus application
5. User buys and is scammed
There are fake SSL forms and the whole shebang.
Here’s a video explaining more about the attack:
Targeted Blackhat SEO Attack against Ford Motor Co. from Panda Security on Vimeo.
h/t Tech Herald
Related Reading:
Google Offers Browser Security Handbook
Live Search Flags Questionable Sites
Organic Results Showing Many Malware Sites, Google Expunges Thousands
Google Adds Malware Tool To Webmaster Central Tools