What's new
  • Donate
    TheWindowsForum.com needs donations to stay online!
    Love TheWindowsForum.com? Then help keep it alive by sending a donation!

Google Search results poisoned with torrent sites via Data Studio

WELCOME TO THEWINDOWSFORUM COMMUNITY!

Our community has more than 50.000 registered members, and we'd love to have you as a member. Join us and take part in our unbiased discussions among people of all different backgrounds about Windows OS, Software, Hardware and more.

AFFASocial

Well-Known Member
VIP
Jun 26, 2021
223
143
OS
Windows 10
BR
Yandex.Browser 22.11.0.2423

Google Search results poisoned with torrent sites via Data Studio​

  • November 18, 2022
  • 09:03 AM
  • 0

Google

Threat actors are abusing Google's Looker Studio (formerly Google Data Studio) to boost search engine rankings for their illicit websites that promote spam, torrents, and pirated content.
The SEO poisoning attack analyzed by BleepingComputer uses Google's datastudio.google.com subdomain to lend credibility to malicious domains.

Abusing Data Studio to boost warez sites' rankings​

BleepingComputer has come across several pages of Google search results flooded with datastudio.google.com links after a concerned reader reported seeing the erratic behavior to us.
These links, rather than representing a legitimate Google Data Studio project, are minisites that host links to pirated content.
Google Data Studio abused to boost SEO rankings of malicious sites
Google Data Studio abused to boost SEO rankings of pirate sites (BleepingComputer)
For example, one such search result we clicked on, directs users looking to "Download Terrifier 2 (2022)" to bit.ly links that further redirect multiple times to ultimately land on a spammy website.
As evident from the screenshot below, the SEO poisoning campaign uses the keyword stuffing technique which is often considered a form of webspam, to boost rankings of these illicit domains:
A sample data studio site identified within the campaign
A sample Google Data studio website identified within the campaign (BleepingComputer)
FIFA 23 download search result
"FIFA 23 Download Torrent" webpage hosted on Data Studio (BleepingComputer)
Clicking on one of these Bit.ly URLs further redirects the user several times before they arrive on a website promoting online surveys, streaming sites of dubious legality and authenticity, and spam:
streaming site claiming to offer a movie
Destination page the user ultimately lands on is a streaming site (BleepingComputer)
destination page user lands on
Another final destination page promotes an "online test" (BleepingComputer)
Introduced in 2016 by Google, Looker Studio (formerly, Google Data Studio) is a web-based business intelligence tool that enables users to transform data into customizable informative reports and dashboard for easy visualization and analysis.
Data Studio can be and has been used to, for example, track and visualize the download counts of open source packages for a given period.
While the legitimate business use cases of Looker Studio are plenty, much like any other web service, it isn't immune from being abused by threat actors looking to host questionable content or manipulating SEO for their illicit domains.
SEO poisoning campaigns spotted in the past have targeted U.S. midterm election keywords, and more recently been seen pushing malware-laced Zoom, TeamViewer, and Visual Studio installers.
BleepingComputer has reached out to Google in advance of publishing to understand how Google plans on tackling the issue and we are awaiting their response.
 

DVDR_Dog

Well-Known Member
Ultimate Donator
Donator
VIP
Nov 5, 2018
1,788
1,287
OS
Windows 10
BR
Chrome 107.0.0.0
Screw it, I am using Duck, Duck, Go. I met Gabe when I made a pitch for funding for my software company a while back. He seems like a great guy and his philosophy seemed to be if you build something honest, people well eventually end up there. His goal was never to be another Google, Just sell enough adverts to pay his employees, the bandwidth bills and enough left over so his family could be comfortable. That's how you build a sustainable business.
 

AFFASocial

Well-Known Member
VIP
Jun 26, 2021
223
143
OS
Windows 10
BR
Yandex.Browser 22.11.0.2423
Screw it, I am using Duck, Duck, Go. I met Gabe when I made a pitch for funding for my software company a while back. He seems like a great guy and his philosophy seemed to be if you build something honest, people well eventually end up there. His goal was never to be another Google, Just sell enough adverts to pay his employees, the bandwidth bills and enough left over so his family could be comfortable. That's how you build a sustainable business.
DDGO is to me the only search option :)
 

Online statistics

Members online
4
Guests online
24
Total visitors
28
Top