{"id":48582,"date":"2023-04-27T06:17:22","date_gmt":"2023-04-27T10:17:22","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=48582"},"modified":"2023-04-27T06:17:25","modified_gmt":"2023-04-27T10:17:25","slug":"crypto-users-lose-over-4m-through-phishing-urls-on-google-ads","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/crypto-users-lose-over-4m-through-phishing-urls-on-google-ads\/","title":{"rendered":"Crypto users lose over $4M through Phishing URLs on Google Ads"},"content":{"rendered":"\n

Blockchain analytics and data from Google Ads show that customers who visited fraudulent phishing websites <\/a>advertised by Google have lost over $4 million.<\/p>\n\n\n\n

\"Crypto
Crypto users lose over $4M through Phishing URLs on Google Ads<\/figcaption><\/figure>\n\n\n\n

According to ScamSniffer, a Web3 anti-scam service provider, malicious advertisements for fraud websites have recently dominated Google ads searches. The URLs lead to fraudulent websites that provoke wallet login signature requests that compromise the addresses of users.<\/p>\n\n\n\n

\n

1\/ \ud83d\udea8 A recent surge in phishing scams via Google search ads has led to users losing approximately $4 million.
ScamSniffer has investigated multiple cases where users clicked on malicious ads and were directed to fraudulent websites.#PhishingScams\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> #GoogleAds<\/use><\/svg><\/span><\/a> pic.twitter.com\/vuKCgSuFnV<\/use><\/svg><\/span><\/a><\/p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) April 27, 2023<\/use><\/svg><\/span><\/a><\/blockquote>

Scammers have targeted several decentralized finance (DeFi) protocols<\/a>, websites, and brands, including Zapper.fi, Lido, Stargate, Defillama, Orbital Finance, and Radiant. Slight modifications to official URLs make it challenging for users to identify malicious links.<\/p>\n\n\n\n

Several of the fraudulent websites in question have been linked to Ukrainian and Canadian advertisers based on an analysis of their metadata. The individuals responsible for the malicious advertisements use various methods to circumvent Google's ad review. This includes manipulating the Google Click ID parameter, which enables attackers to display a standard webpage during Google's ad review.<\/p>\n\n\n\n

Other malicious advertisements employ anti-debugging techniques to redirect users with developer tools enabled to a regular website, whereas a direct click leads to the malicious website. This also permits scammers to circumvent some of Google Ads'<\/a> automated evaluations.<\/p>\n\n\n\n

ScamSniffer's database of on-chain data from addresses linked to malicious websites advertised on Google suggests that over 3,000 users have had $4.16 million stolen in the past month.<\/p>\n\n\n\n

The anti-scam service monitored the on-chain movement of funds to various exchange and blending services, such as SimpleSwap, Tornado Cash, KuCoin, and Binance.<\/p>\n\n\n\n

Using advertising analysis platforms, ScamSniffer <\/use><\/svg><\/span><\/a>concludes that crypto-related fraud website promotion is profitable. Between $1 and $2 is the average cost per hit for associated keywords.<\/p>\n\n\n\n

Assuming a conversion rate of 40% from 7,500 users clicking on malicious advertisements, fraudsters have spent approximately $15,000 on advertising, which has yielded a 276% return given the $4 million stolen to date.<\/p>\n\n\n\n

A report from the Russian cybersecurity and anti-virus provider Kaspersky forecasts a rise in crypto-related phishing attacks through 2022, with over 5 million phishing attacks identified in 2017.<\/p>\n","protected":false},"excerpt":{"rendered":"

Blockchain analytics and data from Google Ads show that customers who visited fraudulent phishing websites advertised by Google have lost over $4 million. According to ScamSniffer, a Web3 anti-scam service provider, malicious advertisements for fraud websites have recently dominated Google ads searches. The URLs lead to fraudulent websites that provoke wallet login signature requests that […]<\/p>\n","protected":false},"author":12,"featured_media":48592,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[9313,1945,14304],"class_list":["post-48582","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-google-ads","tag-crypto-scam","tag-phishing-urls"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/04\/image-57.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/48582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=48582"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/48582\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/48592"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=48582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=48582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=48582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}