Since 2018, our team has been tracking an interesting type of website infection where the </b> tag of a hacked website is changed to Chinese text — changes which are clearly seen in the website’s search results and source code. However, when you open the affected website in a JavaScript-enabled web browser, the site operates as normal and the original title presents itself without any modifications.</p>
<p>What’s going on behind the scenes turns out to be a pretty massive black hat SEO campaign promoting Chinese gambling, sports betting sites, and mobile apps.</p>
<p><a href="https://blog.sucuri.net/2022/12/chinese-gambling-spam-targets-world-cup-keywords.html" rel="nofollow">Continue reading Chinese Gambling Spam Targets World Cup Keywords at Sucuri Blog.</a></p>
<p><a href="https://blog.sucuri.net/2022/12/chinese-gambling-spam-targets-world-cup-keywords.html" rel="nofollow" target="_blank">Via Sucuri.net</a></p> </section>
<p class="tags">Tags: <a href="https://stratusclear.org/tag/malware/" rel="tag">Malware</a>, <a href="https://stratusclear.org/tag/redirects/" rel="tag">Redirects</a>, <a href="https://stratusclear.org/tag/website-security/" rel="tag">Website Security</a></p>
</article><!-- .post -->
<aside id="post-author" class="fix">
<div class="profile-image"><img alt='' src='https://secure.gravatar.com/avatar/fe7e9415cbea6bdec3110462b5a28991c0a8b2f63cd18c88bb045443d5b17bea?s=70&d=mm&r=g' srcset='https://secure.gravatar.com/avatar/fe7e9415cbea6bdec3110462b5a28991c0a8b2f63cd18c88bb045443d5b17bea?s=140&d=mm&r=g 2x' class='avatar avatar-70 photo' height='70' width='70' decoding='async'/></div>
<div class="profile-content">
<h3 class="title">About Sucuri.net</h3>
<div class="profile-link">
<a href="https://stratusclear.org/author/sucuri-net/">
View all posts by Sucuri.net <span class="meta-nav">→</span> </a>
</div><!-- #profile-link -->
</div><!-- .post-entries -->
</aside><!-- .post-author-box -->
<nav id="post-entries" class="fix">
<div class="nav-prev fl"><a href="https://stratusclear.org/wordpress-vulnerability-patch-roundup-november-2022/" rel="prev"><span class="meta-nav">←</span> WordPress Vulnerability & Patch Roundup November 2022</a></div>
<div class="nav-next fr"><a href="https://stratusclear.org/infected-wordpress-plugins-redirect-to-push-notification-scam/" rel="next">Infected WordPress Plugins Redirect to Push Notification Scam <span class="meta-nav">→</span></a></div>
</nav><!-- #post-entries -->
<!-- You can start editing here. -->
</section><!-- #main -->
<aside id="sidebar" class="col-right">
</aside><!-- /#sidebar -->
</div><!-- #content -->
<section id="footer-widgets" class="col-full col-4 fix">
<div class="block footer-widget-1">
<div id="text-7" class="widget widget_text"> <div class="textwidget"><p><center><a target="_blank" href="http://shareasale.com/r.cfm?b=692497&u=1067011&m=41388&urllink=&afftrack="><img decoding="async" src="http://static.shareasale.com/image/41388/wp-engine-logo.jpg" border="0" alt="WP Engine" /></a></center></p>
</div>
</div> </div>
<div class="block footer-widget-2">
<div id="text-8" class="widget widget_text"> <div class="textwidget"><p><a target="_blank" href="https://shareasale.com/r.cfm?b=1321308&u=1067011&m=41388&urllink=&afftrack="><img decoding="async" src="https://static.shareasale.com/image/41388/52-GenesisFramework300x250-460183.png" border="0" /></a></p>
</div>
</div> </div>
<div class="block footer-widget-3">
<div id="text-9" class="widget widget_text"> <div class="textwidget"><p><center><script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script><br />
<!-- Sc 250x250 --><br />
<ins class="adsbygoogle"
style="display:inline-block;width:250px;height:250px"
data-ad-client="ca-pub-5847934571866487"
data-ad-slot="4757825687"></ins><br />
<script>
(adsbygoogle = window.adsbygoogle || []).push({});
</script></center></p>
</div>
</div> </div>
<div class="block footer-widget-4">
<div id="incsub-mailchimp-widget-3" class="widget incsub-mailchimp-widget"><h3>Subscribe to MailChimp</h3>
<form method="post" class="incsub-mailchimp-form " action="#incsub-mailchimp-widget-form-3" id="incsub-mailchimp-widget-form-3">
<p style="display:none" class="incsub-mailchimp-updated">
Thank you, your email has been added to the list. </p>
<p>
Subscribe to our MailChimp list. </p>
<ul style="display:none" class="incsub-mailchimp-error">
</ul>
<div class="incsub-mailchimp-field-wrap">
<label class="incsub-mailchimp-label incsub-mailchimp-label-firstname" id="incsub-mailchimp-label-firstname">First name</label>
<input type="text" class="incsub-mailchimp-field" name="subscription-firstname" data-label="firstname" value="" >
</div>
<div class="incsub-mailchimp-field-wrap">
<label class="incsub-mailchimp-label incsub-mailchimp-label-lastname" id="incsub-mailchimp-label-lastname">Last name</label>
<input type="text" class="incsub-mailchimp-field" name="subscription-lastname" data-label="lastname" value="" >
</div>
<div class="incsub-mailchimp-field-wrap">
<label class="incsub-mailchimp-label ncsub-mailchimp-label-email" id="incsub-mailchimp-label-email">Email</label>
<input type="email" class="incsub-mailchimp-field" name="subscription-email" data-label="email" value="" >
</div>
<input type="hidden" class="incsub-mailchimp-field" name="action" value="incsub_mailchimp_subscribe_user">
<input type="hidden" class="incsub-mailchimp-field" name="form_id" value="incsub-mailchimp-widget-form-3">
<input type="hidden" class="incsub-mailchimp-field" name="require_fn" value="1">
<input type="hidden" class="incsub-mailchimp-field" name="require_ln" value="1">
<input type="hidden" id="_wpnonce" name="_wpnonce" value="b0e7e5b7e6" /><input type="hidden" name="_wp_http_referer" value="/chinese-gambling-spam-targets-world-cup-keywords/" />
<input type="submit" class="incsub-mailchimp-submit" name="submit-subscribe-widget-user" value="Subscribe"> <span class="mailchimp-spinner"></span>
</form>
</div> </div>
</section><!-- /#footer-widgets -->
<footer id="footer">
<div class="col-full">
<div id="copyright" class="col-left">
<p>Stratusclear.org © 2026. All Rights Reserved.</p>
</div>
<div id="credit" class="col-right">
<p>Powered by <a href="http://www.wordpress.org">WordPress</a>. Designed by <a href="http://www.woothemes.com/"><img src="https://stratusclear.org/wp-content/themes/hustle/images/woothemes.png" width="74" height="19" alt="Woo Themes" /></a></p>
</div>
</div>
</footer><!-- /#footer -->
</div><!-- /#wrapper -->
<script type="text/javascript" id="zsiqchat">var $zoho=$zoho || {};$zoho.salesiq = $zoho.salesiq || {widgetcode:"WIDGETCODE", values:{},ready:function(){}};var d=document;s=d.createElement("script");s.type="text/javascript";s.id="zsiqscript";s.defer=true;s.src="SALESIQURL";t=d.getElementsByTagName("script")[0];t.parentNode.insertBefore(s,t);</script><script type="speculationrules">
{"prefetch":[{"source":"document","where":{"and":[{"href_matches":"/*"},{"not":{"href_matches":["/wp-*.php","/wp-admin/*","/wp-content/uploads/*","/wp-content/*","/wp-content/plugins/*","/wp-content/themes/hustle/*","/*\\?(.+)"]}},{"not":{"selector_matches":"a[rel~=\"nofollow\"]"}},{"not":{"selector_matches":".no-prefetch, .no-prefetch a"}}]},"eagerness":"conservative"}]}
</script>
<script type="text/javascript">
amzn_assoc_ad_type = "link_enhancement_widget";
amzn_assoc_tracking_id = "stratusclea05-20";
amzn_assoc_linkid = "PIBD374JAJ62ZZ2X";
amzn_assoc_placement = "";
amzn_assoc_marketplace = "amazon";
amzn_assoc_region = "US";
</script>
<script src="//z-na.amazon-adsystem.com/widgets/q?ServiceVersion=20070822&Operation=GetScript&ID=OneJS&WS=1&MarketPlace=US"></script>
<!--[if lt IE 9]>
<script src="https://stratusclear.org/wp-content/themes/hustle/includes/js/respond.js"></script>
<![endif]-->
<script type="text/javascript" src="https://stratusclear.org/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1" id="wp-hooks-js"></script>
<script type="text/javascript" src="https://stratusclear.org/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375" id="wp-i18n-js"></script>
<script type="text/javascript" id="wp-i18n-js-after">
/* <![CDATA[ */
wp.i18n.setLocaleData( { 'text direction\u0004ltr': [ 'ltr' ] } );
//# sourceURL=wp-i18n-js-after
/* ]]> */
</script>
<script type="text/javascript" src="https://stratusclear.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5" id="swv-js"></script>
<script type="text/javascript" id="contact-form-7-js-before">
/* <![CDATA[ */
var wpcf7 = {
"api": {
"root": "https:\/\/stratusclear.org\/wp-json\/",
"namespace": "contact-form-7\/v1"
},
"cached": 1
};
//# sourceURL=contact-form-7-js-before
/* ]]> */
</script>
<script type="text/javascript" src="https://stratusclear.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5" id="contact-form-7-js"></script>
<script type="text/javascript" id="mailchimp-form-js-js-extra">
/* <![CDATA[ */
var mailchimp_form_captions = {"ajaxurl":"https://stratusclear.org/wp-admin/admin-ajax.php","nonce":"03a8d6e8f2"};
//# sourceURL=mailchimp-form-js-js-extra
/* ]]> */
</script>
<script type="text/javascript" src="https://stratusclear.org/wp-content/plugins/mailchimp-sync/assets/form.js?ver=20140212" id="mailchimp-form-js-js"></script>
<script id="wp-emoji-settings" type="application/json">
{"baseUrl":"https://s.w.org/images/core/emoji/17.0.2/72x72/","ext":".png","svgUrl":"https://s.w.org/images/core/emoji/17.0.2/svg/","svgExt":".svg","source":{"concatemoji":"https://stratusclear.org/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4"}}
</script>
<script type="module">
/* <![CDATA[ */
/*! This file is auto-generated */
const a=JSON.parse(document.getElementById("wp-emoji-settings").textContent),o=(window._wpemojiSettings=a,"wpEmojiSettingsSupports"),s=["flag","emoji"];function i(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function c(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data);e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0);const a=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data);return t.every((e,t)=>e===a[t])}function p(e,t){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var n=e.getImageData(16,16,1,1);for(let e=0;e<n.data.length;e++)if(0!==n.data[e])return!1;return!0}function u(e,t,n,a){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\udde8\ud83c\uddf6","\ud83c\udde8\u200b\ud83c\uddf6")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65\u200b\udb40\udc6e\u200b\udb40\udc67\u200b\udb40\udc7f");case"emoji":return!a(e,"\ud83e\u1fac8")}return!1}function f(e,t,n,a){let r;const o=(r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):document.createElement("canvas")).getContext("2d",{willReadFrequently:!0}),s=(o.textBaseline="top",o.font="600 32px Arial",{});return e.forEach(e=>{s[e]=t(o,e,n,a)}),s}function r(e){var t=document.createElement("script");t.src=e,t.defer=!0,document.head.appendChild(t)}a.supports={everything:!0,everythingExceptFlag:!0},new Promise(t=>{let n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),c.toString(),p.toString()].join(",")+"));",a=new Blob([e],{type:"text/javascript"});const r=new Worker(URL.createObjectURL(a),{name:"wpTestEmojiSupports"});return void(r.onmessage=e=>{i(n=e.data),r.terminate(),t(n)})}catch(e){}i(n=f(s,u,c,p))}t(n)}).then(e=>{for(const n in e)a.supports[n]=e[n],a.supports.everything=a.supports.everything&&a.supports[n],"flag"!==n&&(a.supports.everythingExceptFlag=a.supports.everythingExceptFlag&&a.supports[n]);var t;a.supports.everythingExceptFlag=a.supports.everythingExceptFlag&&!a.supports.flag,a.supports.everything||((t=a.source||{}).concatemoji?r(t.concatemoji):t.wpemoji&&t.twemoji&&(r(t.twemoji),r(t.wpemoji)))});
//# sourceURL=https://stratusclear.org/wp-includes/js/wp-emoji-loader.min.js
/* ]]> */
</script>
</body>
</html>
