4 ms·
… but can you give an example? I tried: target gift card balance chilis gift card balance kohls gift card balance sephora gift card balance … in each
by deathanatos 3y ago
… but can you give an example?
I tried:
target gift card balance
chilis gift card balance
kohls gift card balance
sephora gift card balance
… in each case, the first result was to the actual retailer. (I clicked it, just to be sure; in each case, I went to what appeared to be [retailer].com, and the legitimate site of the owner of that brand.) In each case, the result was an organic (i.e., non-ad) result; there were no ads on these queries. (I do not have an adblocker that would block these, but regardless, I went into private mode anyways, which is configured to disable uBlock.)
- nyanpasu64 3y agoLook up gilimp, among many other examples. There was a malicious ad which used the real gimp.org display domain but redirected to a malicious gilimp.org when clicked.
- deleted 3y ago[deleted]
- strictnein 3y agoI guess I should have led with the statement that we dealt with this a lot 1-2 years ago and these aren't live currently. Unfortunately it was just mentioned at the end. My post was more to illustrate an example of how this had been done in the past and briefly explain the tactics of how the threat actors were able to do it.