Homepage SonicWall newsroom

SonicWALL Identifies Growing Threat of Cybercriminals Attacking New Searches

Announcement posted by SonicWall 10 Mar 2010

Over 284 Top Search Terms attacked over the last 7 days with 6600 Malicious URLs; Threat team outlines tips to protect against searching threats
SYDNEY -  10 March -- SonicWALL, a leading secure network infrastructure company, announced today it identified that cybercriminals are continuing to attack Google's top search items. In the last seven days, more than 284 top search terms have been attacked by more than 6600 malicious URLs.

The threat team has found up to nine of the top 20 search terms are under attack at any one time. To help individuals defend against these types of threats, SonicWALL's threat research team has identified certain search terms that have returned the greatest number of malicious sites and has developed several tips for combing through search terms.

"Cybercriminals use whatever is at their disposal to spread malware. In this instance they are launching attacks against Google's top search terms that identify the most popular stories of the day," said Deepen Desai, Lead Malware Researcher, SonicWALL.

"These criminals are now going after these top search terms using their knowledge to insert malware infected websites almost immediately after people show interest in a particular news site."

Using social engineering tactics, cybercriminals are able to jump onto the latest news events ranking high on Hot Search to draw more traffic to their infected websites. Search Engine Optimisation (SEO) tactics are then used to make the websites show up higher in the search results, thus making it more likely that individuals will click on them. The counter offensive to remove these threats is on-going. However, some sites have remained within search results for a number of hours before being removed. Recent and topical infected searches include:

  • A search on "elinor burkett" within a 24-hour period between March 8th and 9th presented 40 unique malicious URLs appearing in Google search's top 30 results.
  • A search on "the new tenants" on March 8th presented 56 unique malicious URLs appearing in Google search's top 30 results.

SonicWALL suggests you remember the following tips when searching for a news event:

  • Be diligent when clicking on the links that show up in search engine results. Be sure to look at the URL before you click on it. Quite often the legitimate sites show up with complete readable sentences in their description whereas the malicious sites show up with jumbled keywords.
  • If you do click on a malicious website, quickly get out of it.  Most of the malware found redirect to fake antivirus websites that pretend to discover malware on a computer and offers to sell antivirus software that will clean it up.
  • Make sure that your antivirus is up to date.  Use defence-in-depth by layering protection, having antivirus both on the gateway and the client.
  • Steer clear of any kind of video codecs or protection software executables downloads prompted by most of these sites.
  • Do not execute any files that come through e-mail attachments.

For more information and to track the latest network and e-mail security threats, go to: http://www.sonicwall.com/securitycenter.asp?tab=NS

About SonicWALL, Inc.

SonicWALL, Inc., the leader in network security, focuses on developing solutions that remove the cost and complexity out of managing a secure network environment. With over one million award-winning appliances shipped through its global network of ten thousand channel partners, SonicWALL provides end-to-end solutions including firewalls, SSL VPN's, e-mail security and continuous data protection that collectively ensure robust, secure network protection. For more information, visit the company web site at http://www.sonicwall.com/au .

Safe Harbor Regarding Forward-Looking Statements

Certain statements in this press release are "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. The forward-looking statements include but are not limited to statements regarding defensive measures to be used to combat attacks concerning news search sites.  These forward-looking statements are based on the opinions and estimates of management at the time the statements are made and are subject to certain risks and uncertainties that could cause actual results to differ materially from those anticipated in the forward-looking statements. In addition, please see the "Risk Factors" described in our Securities and Exchange Commission filings, including our Annual Report on Form 10-K for the year ended December 31, 2008, for a more detailed description of the risks facing our business. All forward-looking statements included in this release are based upon information available to SonicWALL as of the date of the release, and we assume no obligation to update any such forward-looking statement.

NOTE: SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.

Media contacts:

If you would like to receive more information on SonicWALL, please contact:

Iceberg Communications

Nuria Grifoll

P: +61 2 8907 4932

E: SonicWALL@iceberg.com.au