Over the past few days, we have seen a sharp rise in the volume of
Troj/JSRedir-Z reports. So what does this detection correspond to? Basically, it is detection for the redirect script that is being used within SEO pages to redirect people to fake AV sites.
Using kits to create these keyword stuffed pages on legitimate sites enables fraudsters to get their pages high up in the search engine results, and thus likely to attract user traffic. Frequently SEO pages use topical news stories or celebrity gossip to attract users. In this current attack the fraudsters clearly seem to be getting some success with an “educational theme”.
