Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

630K gov.br Subdomains Abused in SEO Poisoning Attack

hunt.io | blog | #redirects | #brazil | #black-hat-seo | #seo-poisoning | #gov-br | #subdomain-abuse

Summary

Over 630,000 hijacked .gov.br URLs funnel search traffic to gambling and scam pages in a black hat SEO campaign run from a single server with templated HTML and automation scripts.
Published
Collected

original ↗

Related coverage

blog · hunt.io
Unmasking Adversary Infrastructure: How Certificates and Redirects Exposed Earth Baxia and PlugX Activity
Hunt.io maps two malicious server clusters—Earth Baxia and suspected PlugX—found via anomalous Cloudflare certificates, fake 'Microsoft' self-signed certs and 301 redirects to FBI, NASA and eBay.
blog · hunt.io
SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More
Hunt.io exposes SEO-poisoned lookalike sites pushing trojanized installers for Sleipnir, Signal and TradingView—including a macOS DMG with a Poseidon stealer and GhostRAT on a crypto-themed portal.
blog · hunt.io
Unearthing New Infrastructure by Revisiting Past Threat Reports
Hunt revisited a report on Silver Fox phishing against Chinese users and pivoted on its IPs to surface new servers and open directories, linking SEO-poisoned ads to Gh0st, ValleyRAT and Sainbox RATs.
blog · portswigger.net
[MoBP] Flexible redirection
New Burp builds give Intruder and Repeater full control over redirect following - on-site, in-scope, all or none - so attacks can follow useful redirects without going off-site or killing sessions.
blog · hackerone.com
Hacker Spotlight: Interview with manoelt
Brazilian hacker @manoelt won three HackerOne CTF events and makes Portuguese security videos. He traces his start from IRC and a memorable SQL injection demo to balancing bounties with family life.
blog · hackenproof.com
Brazilian personal data exposure
HackenProof's report covered a large-scale exposure of Brazilian personal data and its privacy implications.
back