Something called 'Google dorking' helps hackers find out stuff no one wants them to know (GOOG)
Earlier this week, the US blamed Iranian hackers for a series of attacks in 2012 and 2013 on several targets, including a New York City dam.
The attack on the dam gave the hacker info about water levels and the dam's sluice gate, which could have allowed the attacker to open the gate and flood part of the city, the US Department of Justice said.
But the hacker was foiled because the sluice gate happened to be offline for maintenance during the hack.
How did the accused person get access to this dam? He Googled it, according to The Wall Street Journal.
It's a technique called "Google dorking," which involves using Google's advanced search techniques to dig up information on the internet that doesn't easily pop up during a normal search.
In 2014, the Feds even issued a warning to US businesses to be on the lookout for Google-dorking activity as a sign of hackers.
Despite the funny name, Google dorking isn't an April Fools' joke. It's a real thing.
For instance, Google offers a feature called "site" that lets you search a single website for a keyword or photos — here's a tutorial on how to use that. Google also has special search commands called "filetype" and "datarange."
But the kind of Google dorking the feds are worried about, and that hackers use in their attacks, goes further. It's when malicious hackers use these advanced techniques looking for stuff that companies didn't mean to put online.
In the case of the New York dam, the hacker used Google from the other side of the world to find US infrastructure sites that had vulnerable hardware systems attached to the internet, reports The Journal.
Of course, Google dorking is just as often used for good as for evil. Good-guy hackers, called "white hats," use these same advanced techniques to test security systems and see if and how they can be breached by the bad guys.
The InfoSec Institute, which trains people to be computer-security pros, shows how using Google can easily turn up things like usernames and passwords, sensitive documents, and even bank-account details.
There are entire projects dedicated to that effort, too, like The Diggity Project and the Google Hacking Database. These projects keep lists of premade dorking queries that companies can run on their own websites to see what turns up.
SEE ALSO: Google shocked this man by offering sympathy on the death of his father
Join the conversation about this story »
NOW WATCH: 7 Gmail tricks to make your life a lot easier