Referral spam for Trump
In the era of security first, I was going through our Google Analytics account to monitor the traffic for the month of November. I found that we were getting unusual traffic from places which looked suspicious.
After doing some research, I found that it was a widespread Google Analytics ‘Vote For Trump bot’ and many websites were affected.
Referral spam is everywhere
Whether it’s on Twitter, Facebook, or, of course, in your emails, someone is always trying to sell something. Criminals impersonate trusted senders in email to gain your trust so they can obtain access to sensitive data. These phishing emails may appear to come from different sources including your registrar or friends or business partners.
But one prolific Russian spammer has taken a new way to spread his own message: using Google Analytics referral spam to promote his love for Donald Trump ;-( and to get traffic on his website.
“Money,” Popov wrote. “Traffic is money.”
“Help to Trump and Russia. I like Trump. I even sacrificed traffic to help him,” said Vitaly Popov, who is behind the recent wave of Google Analytics spam, in a email exchange with motherboard.com
If you do what he is asking you for (copy and search the link) you get on this website! (look the “evil” url )
Is secret.ɢoogle.com real?
Google Analytics has become a great target for spammers, where they leave fake traffic that draws unwary web site owners to investigate where it came from. What most people didn’t notice was that the website it referenced looked like secret.Google.com…but it wasn’t.
Compared side by side you will notice that the capital G, is not the same ‘ɢ G’ —can you see the difference? Notice how the ‘G’ is the same size as the lowercase letter ‘o’? It’s not the same G of Google. This technique was also used to create lifehacĸer.com, with a Latin Small Letter Kra, Unicode 0x138 instead of a ‘k’. Hackers are creative, aren’t they? 😃
Once the spam data is registered on your GA account you can’t erase it, but you can only create filters to prevent having dirty data in your account. If you are interested and want learn more about spam filters you can find a guide below to prevent this kind of threats.