US government vaccine hub, Nvidia event page abused in cyberattack spitting out AI slop (19459000)
Now that the page was taken down, events.nsv.nvidia[,]com, it appears to be an events website. The page was taken over, and more than 62,000 AI generated articles were posted. These articles mainly contained incorrect or incomplete information on popular search topics such as video game roundups or restaurant suggestions.
In a similar way, another domain belonging to US Department of Health and Human Services, which advises on vaccines, was also targeted.
The spam campaign WowLazy
does not seem to have any consistent theme or angle. The links on the pages lead to a “nonsense SEO” spam page stocks.wowlazy.com[.]
The spam campaign was discovered by a technologist searching on DuckDuckGo for “best Portland cat cafés” and being directed to the site events.nsv.nvidia[,]com and a spam about cat cafes. Cybercriminals have hijacked sites before to post their own content. Usually, this includes malware or infostealer in order to make money from the spam campaigns. But, as far as we can tell, this wasn’t the situation on this occasion.
SEO appears to be a tool cybercriminals use to spread malware (or not). Users should disable push notifications on sites they do not trust and be cautious when clicking unfamiliar links to reduce the risk of this type attack.
via 404media
- Check out our selection of AI tools
- Cybercriminals use SEO to get popular fake AI software loaded with malware to appear high on Google
has been writing since almost four years. She focuses on post-COVID policies whilst studying BA Politics and International Relations, followed by a MA in Political Communication, at the University of Cardiff. She worked as a Junior Editor for Future Publishing, where she helped merchants and retailers upload content.