Hackers Exploit Websites to Inject Malicious Links for SEO Manipulation

A GBHackers News report published on 10 November 2025 describes a rising trend of hackers exploiting websites to inject malicious links for SEO manipulation, with the activity mainly targeting online gambling sites. The attackers hijack high‑traffic pages on websites, often built on WordPress, by creating directories that mimic legitimate paths (for example, /about/index.html) and inserting spammy content and backlinks.

They infection methods include injecting malicious PHP code into multiple locations such as theme and plugin files, and the code can self‑replicate or fetch content from attacker‑controlled domains to survive removal steps. The piece notes that these campaigns increasingly use region‑specific content to appeal to markets in Indonesia, Thailand and Turkey, while the overall risk to users includes hidden backlinks, cloaked content, and potential links to phishing or further malware.

It cites a review of SiteCheck tool detections indicating that online gambling spam has surged since 2021, with online casino SEO spam now outpacing older categories. Mayura Kathir frames the issue as a growing threat requiring vigilance, proactive security measures, and comprehensive malware scanning. According to SiteCheck, such detections underscore the persistence and adaptability of these campaigns as defenders contend with evolving tactics.