rogueware

Anatomy of a Google 302 Redirect Hijack

5 minute read Enclosure Published

Recently while Googling Olla de Carne (Costa Rican beef stew) my browser was  hijacked after taking a search results link. Rather than receiving a list of ingredients, the link redirected the browser to a bogus antivirus site that mimicked Windows and faked an integrated Explorer virus scan. Let’s examine how it happened.