The Dark Side of Search Engine Optimization Campaigns - AppSec EU 2017

Explore the dark side of Search Engine Optimization (SEO) campaigns in this 35-minute conference talk from AppSec EU 2017. Delve into how threat actors abuse SEO techniques to promote malicious websites, incorporating web attack methods like SQL injection, content spamming, and open redirects to manipulate search engine rankings. Examine the effectiveness of these campaigns by analyzing traffic rankings, user engagement, and traffic sources. Gain insights into why these SEO campaigns succeed and discover potential solutions for detecting and mitigating future threats. Learn about the motivations behind SEO, evaluate campaign metrics using tools like SimilarWeb, and understand the implications for web security.

Intro
Agenda
About me
Attack payload
Attack data
Source IP
First hint
Second hint
Third hint
Fourth hint
Overview
Analysis
What is SEO
What motivates SEO
SEO Campaign Evaluation
SimilarWeb
SimilarWeb Metrics
Conclusions
Questions