Why You Should Scroll Past the First Result on Google
When you search Google for a program to download or a website to log into, the first thing you see is usually an ad. It sits at the top, marked "Sponsored," and most people click it without a second thought, because the top result is normally what you wanted.
Scammers count on that. They buy ads on the names of trusted companies and popular software, so their fake site appears right at the top, above the real one, and you click it thinking it's the official page.
How the scam works
The trick is called malvertising, short for malicious advertising. A scammer buys a search ad for a term people trust, like the name of your bank, a Microsoft login, or a common program such as a PDF reader or a video player. The ad looks normal, with the real brand name and a web address that looks right.
When someone clicks it, they land on a page built to look exactly like the real one. Sometimes that page asks you to log in and hands your username and password straight to the scammer. Other times it offers the software you were after, and the download installs malware instead of the real program.
Why these ads are so easy to fall for
These ads are convincing. They sit above the real result, so they're the first thing you see. They use the real company's name and a web address that looks right. And they show up on a search you started yourself, so they don't feel as suspicious as a random email or text would.
Attackers have also gotten good at hiding from the checks meant to stop them. They show a clean, harmless page to the ad reviewers and the real, malicious page to everyone else, so the ad can pass review and still do damage.
What this means for your business?
For a business, the risk comes up in two everyday situations: downloading software, and logging in.
When someone downloads software, they search for a tool, click the top ad, and install something that steals the passwords and logins saved in their browser.
When someone logs in, they search for "Microsoft 365 login" or their bank, click the ad rather than the official link, and type their username and password straight into a fake page.
In both cases, the problem is info-stealing malware. Once it's on a machine, it can steal saved passwords, browser cookies, and session tokens, which can get an attacker into accounts even when multi-factor authentication is switched on.
How to protect your team
Scroll past the sponsored results. The ads will sit at the top and are marked “sponsored” or Ad.” The real website is usually just below in the normal results.
Bookmark the sites you log into.
For your bank, Microsoft 365, and other important accounts, use a saved bookmark instead of searching each time.
Don’t download software from an ad.
Type the maker’s web address in yourself, or search and use the normal result, then download from the official site.
Tell your team this is a thing
Most people have no idea the top result can be a trap, and once they know, they stop clicking it.
Keep devices and browsers updated.
Turn on automatic updates so a bad download is less likely to work.
Keep alert for Malvertising
Google reviews ads and removes billions that break the rules. However, scammers still slip through by showing the reviewers a clean page but showing everyone else the malicious one.
A “ Sponsored” label does not mean the site is safe.
Are your team aware of this?
Why not provide and create weekly useful tips for your colleagues to read through and expand their technical knowledge
Need some advice? Has a colleague clicked on a scam ad? Contact us today for more information and assistance on Malvertising.
Article used with permission from The Technology Press.