Blackhat Spam SEO & Fake AV: They Are Still There

The report documents an ongoing SEO spam campaign where attackers compromise vulnerable websites (example: casino-jugendclub.de) to host thousands of spam pages that redirect search-engine visitors to fake antivirus pages (e.g., microsoftwindowssecurity145.com) hosting malicious executables; antivirus detection of the payload is reported to be low (~25%), and the piece highlights the persistence of this low-sophistication but effective distribution technique.