Nelson's Weblog: tech / bad / phishing-via-google-ads


Mastodon @nelson@tech.lgbt Linkblog Wed 2024-11-20 Francis Williams painting The Platonic Blow Tue 2024-11-19 EmojiRain Bantam Tools Artframe Using OSM vector tiles Starlink sold out Fine-tuning LLMs at home Bluesky starter packs Mon 2024-11-18 Carbon Mapper Sun 2024-11-17 Love, Acceptance, and Screeching Modems Voyager 1 backup radio Gay Tblisi Usenet feed growth Methane mapping City99 console font Sat 2024-11-16 Lorraine Gervais Sill Justin's Linklog Thune 2004 blog campaign Fri 2024-11-15 Open source garage door Search Archives 2023 12 11 10 09 08 07 06 05 04 03 02 01 2022 12 11 10 09 08 07 06 05 04 03 02 01 2021 12 11 10 09 08 07 06 05 04 03 02 01 2020 12 11 10 09 08 07 06 05 04 03 02 01 2019 12 11 10 09 08 07 06 05 04 03 02 01 2018 12 11 10 09 08 07 06 05 04 03 02 01 2017 12 11 10 09 08 07 06 05 04 03 02 01 2016 12 11 10 09 08 07 06 05 04 03 02 01 2015 12 11 10 09 08 07 06 05 04 03 02 01 2014 12 11 10 09 08 07 06 05 04 03 02 01 2013 12 11 10 09 08 07 06 05 04 03 02 01 2012 12 11 10 09 08 07 06 05 04 03 02 01 2011 12 11 10 09 08 07 06 05 04 03 02 01 2010 12 11 10 09 08 07 06 05 04 03 02 01 2009 12 11 10 09 08 07 06 05 04 03 02 01 2008 12 11 10 09 08 07 06 05 04 03 02 01 2007 12 11 10 09 08 07 06 05 04 03 02 01 2006 12 11 10 09 08 07 06 05 04 03 02 01 2005 12 11 10 09 08 07 06 05 04 03 02 01 2004 12 11 10 09 08 07 06 05 04 03 02 01 2003 12 11 10 09 08 07 06 05 04 03 02 01 2002 12 11 10 09 08 07 06 05 04 03 02 01 2001 12 11 10 09 08 07 One good site MDN Nelson Minar nelson@monkey.org Blog licensed under a Creative Commons License		Phishing via Google ads Interesting report of stolen Bitcoins, a phishing scam involving a Google ad. I just confirmed that the phishing ad is still running on Google on a search for blockchain. The ad says the URL goes to `blockchain.info`. The URL displayed on mouseover on the link is to a Google redirector, `goo.gl/vL2zmr`. But when you click the link you go through a few redirectors and end up at `blockchain-info.consulpisos.com`, which is allegedly a phishing site. It sure looks suspicious; that page goes straight to a “type in your password” page, which the real site hides behind several clicks. I don’t much care about the Bitcoin part of this, but Google should really not be selling ads with fake URLs on display. tech • bad 2014-06-07 15:45 Z Nelson's Weblog • tech • bad