Cybercriminals Use IISerpent Server-side Malware to Manipulate Search Engine Results

guest · Aug 13, 2021

IISerpent: Malware‑driven SEO fraud as a service
August 11, 2021
https://www.welivesecurity.com/2021/08/11/iiserpent-malware-driven-seo-fraud-service/

ESET researchers have discovered and analyzed a previously undocumented server-side trojan that manipulates search engine results by hijacking the reputation of the websites it compromises. We named the trojan IISerpent to highlight its two main features: being implemented as a malicious extension for Internet Information Services (IIS) web server, and using shady techniques to manipulate search engine result pages (SERPs).

IISerpent’s operators use a variety of techniques for search engine optimization (SEO), in an attempt to improve page ranking for third-party websites – likely the paying customers of these criminals.
Click to expand...

Conclusion
IISerpent is a malicious IIS module with unusual targets and purpose, designed to aid in shady practices aimed at boosting the page rank of third-party websites. Even though it doesn’t affect legitimate visitors of the compromised server, it nevertheless still deserves attention for distorting search results, and its potential for monetization.

On top of hijacking the reputation of the compromised websites, IISerpent can be a cause for headaches for the digital marketers, as any website participating in unethical SEO practices can be penalized by search engine algorithms.
Click to expand...

Log in or Sign up

Cybercriminals Use IISerpent Server-side Malware to Manipulate Search Engine Results

guest Guest

Log in or Sign up

Cybercriminals Use IISerpent Server-side Malware to Manipulate Search Engine Results

guest Guest

Useful Searches