Who on earth would be trying to promote EC-Council University via comment spam on my website?

Surely it can’t be someone acting unethically to promote ethical hacking courses?

Who on earth would be trying to promote EC-Council University via comment spam on my website?

When you run a blog, one of the things you find yourself having to deal with is comment spam.

Sometimes it will be people trying to promote a service that will let you cheat at writing essays…

Comment spam 1

…or advertise an online pharmacy…

Comment spam 2

…or good old-fashioned porn.

Comment spam 3

You expect to have unwanted comments like this submitted to your blog, and a good anti-spam plugin (I use Akismet) automatically filters them, meaning you don’t have to waste hours each day marking them individually as spam.

But some spam does sometimes get through. Take this, for instance:

EC-Council comment spam

What’s unusual about this piece of comment spam, is that it’s not shilling dodgy medications, an essay-writing service, or foot fetish videos, but a website from EC-Council, a “legitimate” cybersecurity organisation.

Yes, someone has gone to the effort of finding a blog post where I wrote about how I was speaking at an event in Helsinki, and used that as an excuse to promote one of EC-Council’s own services: the so-called EC-Council University.

EC-Council University claims to be “a premier institution of higher learning that specializes in cybersecurity technologies, enabling its graduates to obtain advanced cyber skillsets.” Don’t be fooled by its slick marketing video (I won’t link to it here, why should I give them the traffic?) showing off what is presented as the university campus. EC-Council University is entirely online.

Sign up to our free newsletter.
Security news, advice, and tips.

EC-Council itself runs a Certified Ethical Hacker programme, so you would expect it to behave ethically – right? It can’t possibly have paid someone to boost its SEO rankings by posting spam on cybersecurity blogs… can it?

Sadly, EC-Council hasn’t covered itself in glory in the past with accusations of sexism, “shady practices”, and plagiarism, as well as rather embarrassingly spreading the Angler ransomware and having its website defaced with an image of Edward Snowden’s passport.

Defaced website

I can’t tell you not to seek ethical hacking certification from EC-Council. But I can suggest that if you are looking for an online university to boost your cybersecurity career, you don’t settle for an outfit that has proven itself to be of questionable ethics and utterly clueless.

I told EC-Council about the comment spam left promoting their website yesterday. It hasn’t responded.

Maybe I should wait until a reply is submitted via the comments section below… presumably with a link to one of its websites.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "The AI Fix" and "Smashing Security" podcasts. Follow him on Bluesky, Mastodon, and Threads, or drop him an email.

5 comments on “Who on earth would be trying to promote EC-Council University via comment spam on my website?”

  1. Jay vad

    Struggling to believe EC would do this. The E stands for "ethical" … so clearly this is a ploy by their enemies.

    Anyhow. If you really want good quality cybersecurity content, you should visit www.javvadmalik.com a truly great man, role model, and icon.

    1. Graham CluleyGraham Cluley · in reply to Jay vad

      I guess I deserved that…

  2. Spryte

    I got an email very similar !? But subscribe to many blogs and newsletters.

  3. Venus Fisher | Chief Academic Officer & Dean EC-Council University

    Thanks for bringing this to our attention. EC-Council University did not author, submit, or initiate such “spam” to promote itself.

    While I do not know who you emailed at the University, I have taken the liberty to email you directly so that you can reach out to me if you have further concerns.

  4. Stefan Landherr

    I don't think this was a ploy by EC-Council University.
    It looks more like a typical "stream of consciousness" email by someone who thinks the world is interested in the minutiae of their life.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.