Search Engine Poisoning (SEP) attacks manipulate, or poison, search engines to display search results that contain references to malware-delivering Web sites. SEP is performed by taking control of popular websites, using search engines’ sponsored links to reference malicious sites, and injecting HTML code. This graphic explains how this attack works step-by-step.