1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Scammers bypass Google filters with PDF cloaking

Discussion in 'CSO' started by RSS, Jul 7, 2015.

  1. RSS

    RSS New Member Member

    Scammers have long used cloaking as a technique to drive up search engine rankings, stuffing webpages full of keywords and links that make them attractive to Google, but not to actual readers.

    Google wised up and those tactics became ineffective. But, according to a new report from SophosLabs, there is one twist on cloaking that still works, and that is to stuff those keywords and links into PDF documents instead.

    "It is our supposition that Google has not protected PDFs from this type of search engine poisoning the same way it has with HTML files," said Maxim Weinstein, security adviser at Sophos.

    MORE ON CSO: How to spot a phishing email

    According to Weinstein, SophosLabs noticed the PDF cloaking a few days ago, and hundreds of thousands of fake PDF documents have been appearing daily since then.

    To read this article in full or to leave a comment, please click here

    Continue reading...

Share This Page