Browse Definitions :
Definition

pharma hack

Contributor(s): Stan Gibilisco

The pharma hack is an exploit that takes advantage of vulnerabilities in WordPress or Joomla documents, causing search engines, notably the one hosted by Google, to return ads for pharmaceutical products along with legitimate listings. The hack can be difficult to detect because it does not affect the displayed pages of the compromised Web site or blog.

The purpose of the pharma hack is to make pharmaceutical sales sites they are promoting appear higher in Google results than they otherwise would. The Google search engine ranks the list of hits for a given Web site according to (among other factors) the number of external sites that link to it. By inserting the rogue code into an unsuspecting victim's site, the hack in effect links that site to the cracker's site. If done on a large enough scale, this tactic can result in the cracker's Web site showing up near the tops of various hit lists resulting from keyword-based searches.

In WordPress, the pharma hack comprises files in the plugins folder that contain malicious code that runs other, disguised code in the database. The code is disguised by reversing the order of the strings, thereby making the problem difficult to detect as a hack. In order for the hack to work, the malicious files must exist in the plugins folder. Once activated, the hack pings Google to find out how many links exist for a particular listed Web page. The more links a page has, the more "desirable" a target it makes, and the greater is the likelihood that it will be hacked.

In order to find out if a given site has been compromised by the pharma hack, experts recommend entering a specific character sequence into the Google search engine. Type "site" followed by a colon, then the domain name followed by a space, then "Viagra" and finally hit the search button. If the site has been affected, unusual descriptions linked to actual pages or blog posts will appear. The modified title tag and links can only be seen in search results, not in the hacked site itself.

Victims of the pharma hack have reported decreased traffic to their sites and, in some cases, removal of their sites by Google from search result lists. Because Web site owners cannot readily see when they have been pharma hacked, the online reputation of a legitimate company or individual can be seriously damaged before the rogue code can be removed. Once discovered, the code can be taken out of the affected files, although the process can take considerable time and effort.

This was last updated in March 2013

Continue Reading About pharma hack

Join the conversation

2 comments

Send me notifications when other members comment.

Please create a username to comment.

It is common now days. If your site is hacked, you can contact astonishindia at gmail dot com for further help and assistance.
Cancel
http://health-tabs-store.com pharma hacked our WordPress site. We updated to the latest version and it seemed to fix the problem.
Cancel

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • compliance audit

    A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines.

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

SearchSecurity

  • orphan account

    An orphan account, also referred to as an orphaned account, is a user account that can provide access to corporate systems, ...

  • voice squatting (skill squatting)

    Voice squatting is an attack vector for voice user interfaces (VUIs) that exploits homonyms (words that sound the same but are ...

  • WPA3

    WPA3, also known as Wi-Fi Protected Access 3, is the third version of the security certification program developed by the Wi-Fi ...

SearchHealthIT

SearchDisasterRecovery

  • business continuity policy

    Business continuity policy is the set of standards and guidelines an organization enforces to ensure resilience and proper risk ...

  • business continuity and disaster recovery (BCDR)

    Business continuity and disaster recovery (BCDR) are closely related practices that describe an organization's preparation for ...

  • warm site

    A warm site is a type of facility an organization uses to recover its technology infrastructure when its primary data center goes...

SearchStorage

  • cache memory

    Cache memory, also called CPU memory, is high-speed static random access memory (SRAM) that a computer microprocessor can access ...

  • disk array

    A disk array, also called a storage array, is a data storage system used for block-based storage, file-based storage or object ...

  • enterprise storage

    Enterprise storage is a centralized repository for business information that provides common data management, protection and data...

Close