5 ms·
When you search for an app, google will happily allow attackers to buy that result and direct mislabeled links to the attackers' site. A former ceo got his lap
by x0x0 2y ago
When you search for an app, google will happily allow attackers to buy that result and direct mislabeled links to the attackers' site. A former ceo got his laptop owned that way trying to install Adobe Acrobat because he unfortunately trusted google and thought the first result for a search for Adobe Acrobat would be legit. I was quite annoyed about having to clean up his laptop but you have to be relatively sophisticated not to get taken in.
This continues to be a problem; from the article, see eg this ad for Bitwarden:
https://x.com/KarlEmilNikka/status/1792554054893072672 https://x.com/KarlEmilNikka/status/1792554054893072672
Google allows the attacker to target navigational queries (in this case, bitwarden) and display "www.bitwarden.com" as the link text on a link that does not actually go to www.bitwarden.com .
The root cause is Google are parasites that (1) monetize navigation / install queries; and (2) force you to buy ads on your own company's name [1]. This opens the gate to attacks like the above, which they also don't effectively police.
[1] https://nymag.com/intelligencer/2019/03/why-businesses-have-to-buy-google-ads-against-their-own-name.html https://nymag.com/intelligencer/2019/03/why-businesses-have-...
- account42 2y ago> you have to be relatively sophisticated not to get taken in More than that, you have to be ever vigilant, which is not a resonable expectation for anyone. It only takes one lapse at the wrong moment.
- x0x0 2y agoShould searching for "legit software" and clicking on the first result which displays www.legitsoftware.com in it in fact take you to legitsoftware.com? You'd think so except Google likes money.