What Is Search Engine Poisoning?
Search engine poisoning is a malicious tactic that manipulates search rankings to place harmful links — malware, phishing pages, or scam sites — in front of unsuspecting searchers, often by exploiting trending or high-demand search topics.
How It Works
Attackers typically compromise legitimate, otherwise trustworthy sites to host malicious content, then use SEO and content spam techniques to get those poisoned pages ranking quickly for trending or high-volume search terms, exploiting the temporary spike in search interest before the pages get caught and removed.
How to Spot It
Warning signs include search results that seem unusually off-topic or low-quality for a trending term, URLs on otherwise reputable-looking domains that redirect unexpectedly, and sudden prompts to download software or enter sensitive information. Site owners can protect against being used as a host by keeping software and plugins updated and monitoring for unauthorized content changes.
