Bahama botnet steals Google search traffic!

This botnet is aimed at replacing the original Google page and inserts advertisements into the results of a query.
The botnet architecture is such that ad clicks cannot be determined.
As a result, large advertising systems such as Google AdWords are affected.

Google’s main revenue is revenue from the traffic on contextual ads that are given along with the results of search queries. Bahama steals about 30% of such traffic.

A botnet enters the server IP of the server with a fake page in the host file, which leads to the opening of a fake site.
It is interesting that this bot, after changing the host file of the system, is easily detected and allows itself to be removed by antivirus.