Security researchers have warned of a large number of fake obituaries designed to make money for their creators by redirecting visitors to adult entertainment sites and launching antivirus (AV) pop-ups.
Secureworks claimed in a new blog post that scammers monitor Google search trends to identify interest in obituaries after a death, then create fake notices using generative AI (GenAI).
They then use classic search engine optimization (SEO) poisoning techniques to ensure that the pages hosting these fake obituaries rank high in search results.
Visitors to these sites are sometimes redirected to adult entertainment or e-dating sites, Secureworks said.
More on SEO poisoning: Malware redirects 15,000 sites in malicious SEO campaign
However, they may be presented with CAPTCHA prompts that install web push notifications or pop-up ads when clicked. While these present the victim with false AV warnings, they ultimately lead to legitimate subscription-based AV downloads, according to research.
Scammers can monetize this through affiliate rewards, if the victim is afraid to download the AV software and/or the pay-per-impression revenue from the pop-up ads, Secureworks said.
Tony Adams, senior threat researcher at Secureworks, explained that scammers are deliberately trying to make money off of emotionally vulnerable people.
“The last thing people want to expect when looking for a loved one’s obituary is a fake virus infection scam. Scammers are using a powerful combination of AI, social engineering and weaknesses in popular search engines to pounce on in their pockets,” he added.
“While the scam right now is focused on monetizing pop-up ads or affiliate reward programs for things like antivirus subscriptions, our concern is that this could easily evolve into more sinister outcomes like the delivery of malware.”
The obituaries themselves are fairly easy to spot as they are likely to use flowery language combined with an impersonal tone, the blog warned. Sometimes the details of the deceased can be incorrect, in one recent case the individual was not even dead.
[ad_2]
Source link
