Users click a legitimate-looking result but are immediately sent to a scam site or prompted to install malware like the AMOS infostealer . The Current State of the "Hijack"
Search hijacking isn't a single event but a collection of methods used by scammers and "black-hat" SEOs to steal the top spots on Google. This pushes legitimate, helpful content down and replaces it with spam or malware. Google Search Results Hijacked?
In late 2025 and early 2026, the scale of these attacks reached new heights. In one instance, a hijacked subdomain on a major university site jumped from zero to . Google’s Response Users click a legitimate-looking result but are immediately
Scammers buy old, trusted domains and fill them with spam or gambling links, exploiting the domain's existing authority. exploiting the domain's existing authority.