Original URL: http://www.channelregister.co.uk/2006/05/15/google_adword_scam/
Botnets are being used for Google Adword click fraud, according to security watchers.
The SANS Institute has uncovered evidence that networks of compromised PCs are being used to click on banner ads, generating revenue for unscrupulous publishers.
Pay-per-click schemes such as Google Adsense have programs to detect fraudulent clicks and suspend publishers implicated in click fraud. In an effort to disguise bogus visits, these publishers have begun hiring botnets to slip under the radar of fraud detection programs.
The "bottom line is that the advertiser pays in exchange for a bot visiting him", the SANS Institute reports (http://isc.sans.org/diary.php?storyid=1334).
Generating traffic from a small number of machines (numbered in the hundreds) makes the traffic generated from compromised machines look innocuous. In return for helping click fraud scammers keep a low profile, botnet owners rake in a percentage from the scam.
The ruse came to light after security experts in the SANS Institute's Internet Storm Centre investigated malicious software on a hacker's website. Control panels on the site, designed to facilitate the control of compromised machines infected with malware, were left open. This allowed security experts to analyse the actions of the botnet operator behind the site.
"The botnet was 115 bots in size at the early time of the day I was looking at it and most were under 15 clicks each," a handler at SANS Institute reports in a diary entry (http://isc.sans.org/diary.php?storyid=1334) filed last weekend.
The institute has reported the site and its findings to Google. ®
Spamhaus-style service aims to curb click fraud (20 October 2006)
http://www.theregister.co.uk/2006/10/20/clickhaus/
BT debuts 'spam-buster' system (12 October 2006)
http://www.channelregister.co.uk/2006/10/12/bt_spam_buster/
Worm automates Google AdSense fraud (6 October 2006)
http://www.channelregister.co.uk/2006/10/06/google_adsense_worm/
Trend Micro to kick butt on botnets (26 September 2006)
http://www.channelregister.co.uk/2006/09/26/trend_micro_botnet_appliance/
Botnet herder jailed over hospital attack (29 August 2006)
http://www.channelregister.co.uk/2006/08/29/botnet_herder_jailed/
Mocbot worm fuels zombie surge (23 August 2006)
http://www.channelregister.co.uk/2006/08/23/mocbot_worm_zombie_surge/
What are we going to do about click fraud? Form a committee! (3 August 2006)
http://www.theregister.co.uk/2006/08/03/iab_click_fraud_committee/
Tool uses Google to hunt for open source bugs (28 July 2006)
http://www.channelregister.co.uk/2006/07/28/bugle/
Google-based malware search tool surfaces (18 July 2006)
http://www.channelregister.co.uk/2006/07/18/malware_search/
Bogus clicks undermine online advertising (17 July 2006)
http://www.theregister.co.uk/2006/07/17/click_fraud_increasing/
Yahoo! settles click fraud (29 June 2006)
http://www.channelregister.co.uk/2006/06/29/yahoo_click_fraud/
Anti-virus market hits $4bn (26 June 2006)
http://www.channelregister.co.uk/2006/06/26/av_market_gartner/
Jail time for payola search engines (22 June 2006)
http://www.theregister.co.uk/2006/06/22/payola_search_amendment/
Taiwan fingered as the hub of spam distribution (12 June 2006)
http://www.channelregister.co.uk/2006/06/12/spam_distribution_study_ciphertrust/
Spyware dominates malware production efforts (12 June 2006)
http://www.channelregister.co.uk/2006/06/12/malware_trends_aladdin/
Top of the sops (8 June 2006)
http://www.channelregister.co.uk/2006/06/08/spyware_chart_may/
Search results lead to malicious sites (16 May 2006)
http://www.channelregister.co.uk/2006/05/16/mcafee_search_risks_survey/
Botnet master jailed for five years (9 May 2006)
http://www.channelregister.co.uk/2006/05/09/botnet_master_ancheta_jailed/
Google AdSense Trojan prowls cyberspace (30 December 2005)
http://www.channelregister.co.uk/2005/12/30/google_adsense_trojan/
Google DNS glitch sparks hacking fears (9 May 2005)
http://www.theregister.co.uk/2005/05/09/google_dns_glitch/
Rise of the botnets (15 March 2005)
http://www.channelregister.co.uk/2005/03/15/honeypot_botnet_study/
Botnets strangle Google Adwords campaigns (3 February 2005)
http://www.theregister.co.uk/2005/02/03/google_adwords_attack/
© Copyright 2008