Multiple Hijacking

This report outlines a series of website hijackings where attackers use Blackhat SEO to serve benign spam to crawlers while redirecting real users (via 302/307 redirects or injected obfuscated JavaScript/IFRAMEs) to Fake AV and other malicious domains. The document includes example infected sites, deobfuscated code, and specific malicious URLs, and explains that site-wide injections increase the chance of rapid detection by search engines.