Ukrainian Attackers Use SEO, Fed Forms To Push Scareware To U.S. Users

Ukrainian hackers are using a unique combination of search engine optimization and U.S. federal government forms to promote fake antivirus software. Researchers say the Ukrainian campaign is actively hijacking a variety of keywords in an attempt to serve the Personal Antivirus (Trojan.Win32.FakeXPA) scareware. The attackers have figured out a method to bypass Google’s Safebrowser blacklist and deploy sophisticated page rank-boosting tools to elevate their malicious pages to the top of the Google search results for a given federal forms keyword.”]

Source: https://www.darkreading.com/attacks-breaches/ukrainian-attackers-use-seo-fed-forms-to-push-scareware-to-u-s-users