Security experts have discovered a malicious programe aimed at tricking users into clicking on phony search results on fake Google, Yahoo and MSN sites, a media report said on Saturday.
People with infected machines who try to visit those popular search sites are redirected to spoof versions, anti-virus company Panda Software was quoted by CNET online service as saying.
The spoof sites serve up bogus search results intended to generate traffic and revenue for other sites that are presumed to be in on the scheme, said Patrick Hinojosa, Panda's chief technology officer.
"This is a business; this is organised crime," Hinojosa said. "People are making money on it."
Representatives from Google, Microsoft and Yahoo, CNET said, did not immediately return inquiries for comment.
Machines can become infected with the programme, called PremiumSearch, when visiting Web sites that distribute pirated software and pornography, Panda reported. Hinojosa said he doesn't know how many machines have been infected.
Besides altered search results, the spoof sites are indistinguishable from the original version, the company said.
The programme also installs a fake Google toolbar that similarly interferes with results.
Hinojosa said Panda notified the Internet service provider that is hosting the spoof sites in the US. He declined to name the ISP, noting that it might have already shut the sites down. Panda also notified federal authorities, including the Federal Bureau of Investigation, he said.
Panda, which is based in Spain, makes software to combat viruses, worms, spyware and other unwanted programmes.
