In this post we show one way spammers operate, using organizations like IBM to spam others. We show how spammers abuse an IBM wiki to create an online pharmacy via IBM.com. Once a page like this is in place, the spammers try to insert links to it in blog comments and community websites across the web to drive traffic to it, and to improve their search engine ranking.

While IBM is not using Mollom (maybe they should?), many of the targeted blogs and community websites are, which is how we discovered this problem. Watch the video below for more details. This problem is not specific to IBM. We found hundreds of similar spam pages on Google Sites, Yahoo, Amazon.com, Wordpress.com, Ning, Tripod.com, Xanga.com and more.

I recorded this video last week, and notified IBM about the existence of these spam pages several days ago. We're happy to help IBM fix this problem.

Comments

alexanderpas (not verified):

And that's the power of numbers!

IBM probably didn't noticed it before you notified them, or were in over their head, but with the help of Mollom, the web became a bit more spam-free!

ratioswitch (not verified):

Wow.

Thanks for the post Dries.

As if posting spam via a wiki comment field was not bad enough, seeing the googpillar redirect work is what gets me ticked--such a blatant violation on so many levels.

Either way, who in the world is clicking on these spam links posted in an IBM developer wiki?

The Drupal for Designers project site (http://project.designfordrupal.org) is also being hit with spam comments in a very similar fashion. I'm not sure if Mollom is installed there or not on this Atrium installation (if it's not, Mollom should be ... if it is, oh no!).

When searching for the D4D username of the spammer within the D4D project site, the spammer has long since deleted their profile (or at least it looks that way). Here's my comment about it (http://project.designfordrupal.org/org/node/121#comment-348).

WTF?!?!

_rs