- Microsoft will float cloud OS this month
- Top 16 Chinese iPhoneys
- Pimp your ride: Cool car technology
- Laptop stolen from McCain campaign
- Cisco, Microsoft roll out server, networking appliance
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Value of WDS
A blog set up to promote former U.S. Vice President Al Gore's film, "An Inconvenient Truth," has been hacked and is hosting links to Web sites hawking online pharmaceuticals.
The links appear to have been created as part of a scheme to boost the Web traffic for sites that promote the drugs, security experts said Monday. They contain titles such as "Xanax On Line," "Viagra," and "Buy Valium Online."
Cyber scammers have been using this technique for months now, packing hacked Web sites with links to their products in hopes of bumping up their rankings on search engines such as Google and Ask.com. Another similar tactic, known as "comment spam," involves flooding the comment sections of Web sites with these types of links.
Because search engines give priority to pages that are linked to by very popular pages, adding links from the Inconvenient Truth blog would be a bonanza for scammers, according to Adam Thomas, a malware researcher at Sunbelt Software. The film's blog has "such a high page ranking that they use that as sort of conduit to ... gain a really high Google page rank, and hope that they can find some suckers to buy some medications online," he said.
The climatecrisis.net domain, which hosts the blog, is registered to Al Gore, the star of the 2006 Academy Award-winning documentary on global warming. Not all pages on the site appear to have been compromised, security experts say; just those associated with the blog.
Though the drug-promoting links can be seen by the crawler software used by search engines, most visitors wouldn't even know that they exist. On Monday, they couldn't be seen on the Web page itself, but were visible in the blog's source code -- which only the people who maintain the Web site should be able to alter. The links point to Web pages on a site run by Westmont College, a small Christian college based in Santa Barbara, California. The Westmont College Web site also appears to have been hacked, Thomas said.
The hacked Westmont pages are in an early stage of development, but some of them were hosting blog pages that could ultimately be used to host ads for the drugs or even to link to other sites that actually sold the pharmaceuticals, Thomas said.
Thomas said attackers were most likely able to gain access to the blog by exploiting flaws in the WordPress Web publishing software used by both the Inconvenient Truth blog and Westmont College. Representatives for Al Gore and Westmont College could not be reached immediately for comment.

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
Security Considerations When Deploying Remote Access SolutionsEffective network security is most successful when you use a layered approach, with multiple...

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Turning information into a Competitive AdvantageCompanies today are realizing that competitive advantage is harder to sustain when based solely on...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comments (2)
culprit...By Anonymous on December 3, 2007, 11:47 amany inclination to believe that the culprit might be a student at Westmont or whatever christian college that was with a spot on the college network for his/her...
Reply | Read entire comment
RE: Another inconvenient truth: Al Gore's Web site hackedBy Stuart on November 27, 2007, 4:27 pmNice to see that everyone has ripped this story off without crediting the original author who posted about it weeks ago: http://www.earnersblog.com/wordpress-hacked/
Reply | Read entire comment
View all comments