- A nvidia -event page has been hijacked with AI -Generated Spam
- NPR, Stanford and some US Government Sites were also taken over
- Spam appears to be explicit but non-malicious
Several web domains have been hijacked to show explicit and AI-generated content in a spam campaign that targeted NVIDIA, NPR, Stanford and US government sites.
The primarily targeted side, events.nsv.nvidia[,]Com is now taken down but was apparently an event place. The site was taken over and more than 62,000 AI-generated articles were published, primarily containing incorrect or incomplete information about popular search topics such as video game-round-ups or restaurant recommendations.
Elsewhere, a domain belonging to the US Ministry of Health and Human Services (HHS) on vaccines was also targeted and abolished in a similar way.
WOWLAZY SPAM campaign
It is not clear who hijacked the place or purpose behind it, as AI -Slop does not appear to have a consistent theme or angle. The links on the pages directly to a “Nonsense SEO SPAM -Side” -lagre.wowlazy[.]com.
Much of the content appears to have been apparently explicit, but much was also “completely everyday” – the spam campaign was discovered thanks to a technologist searching for ‘best portland cat cafes’ at DuckduckGo and was addressed to the events.nsv.nvidia[,]com -site and a spam page about Cat cafes.
This is not the first time that cyber criminals have hijacked sites to send their own content, but usually this contains a kind of malware of infoTeals to make profits from the spam campaigns – but as far as we can see it was not the case on this occasion.
SEO seems to be a tool that cyber criminals benefit from delivering malware (or not) to a wider audience. To mitigate the risk of this type of attack, users need to disable Push messages from sites they do not know/trust and be very careful with unknown links.
Techradar Pro reached out to CDC, NPR, Stanford and Nvidia for comment, but has not yet received an answer.
Via 404 media
