{"id":76626,"date":"2024-04-19T11:52:33","date_gmt":"2024-04-19T15:52:33","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=76626"},"modified":"2024-04-19T11:52:36","modified_gmt":"2024-04-19T15:52:36","slug":"scammers-use-google-ads-to-promote-phishing-site-report","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/scammers-use-google-ads-to-promote-phishing-site-report\/","title":{"rendered":"Scammers Use Google Ads to Promote Phishing Site &#8211; Report"},"content":{"rendered":"\n<p>According to a report by BleepingComputer, scammers are advertising <a href=\"https:\/\/coinscreed.com\/staging\/national-fraud-intelligence-bureau-blocks-43-crypto-phishing-domains.html\" target=\"_blank\" rel=\"noreferrer noopener\">fraudulent crypto websites<\/a> using Google's Ads platform.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"557\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-1024x557.png\" alt=\"Scammers Use Google Ads to Promote Phishing Site - Report\" class=\"wp-image-76638\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-1024x557.png 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-300x163.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-768x418.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-1320x718.png 1320w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-750x408.png 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121-1140x620.png 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121.png 1359w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Scammers Use Google Ads to Promote Phishing Site &#8211; Report<\/figcaption><\/figure>\n\n\n\n<p>Google seems to be endorsing a malevolent cryptocurrency website that redirects users to a cloned fraudulent website, which exploits users' cryptocurrency using Google Ads, an online advertising platform that allows companies to display advertisements on Google's search engine results pages.<\/p>\n\n\n\n<p>Threat actors have discovered a way to promote a counterfeit version of Whales Market. This <a href=\"https:\/\/coinscreed.com\/staging\/hong-kong-plans-tighter-regulations-for-otc-crypto-services.html\" target=\"_blank\" rel=\"noreferrer noopener\">over-the-counter (OTC) cryptocurrency platform<\/a> facilitates the trading of airdropped tokens, according to a report by BleepingComputer.<\/p>\n\n\n\n<p>According to the report, sponsored links at the top of Google search results promote the illegitimate version.<\/p>\n\n\n\n<p>According to confirmation by Cointelegraph, Google is presently employing the counterfeit Whales Market as an advertisement. Despite the domain name appearing authentic on the search results page, users are directed to [www.whaels.market] rather than the intended [www.whales.market] when they attempt to access it.<\/p>\n\n\n\n<figure class=\"wp-block-image size-jnews-featured-750\"><img decoding=\"async\" width=\"750\" height=\"440\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-120-750x440.png\" alt=\"Fake version of Whales Market promoted by Google Ads   \" class=\"wp-image-76636\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-120-750x440.png 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-120-300x176.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-120-768x451.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-120.png 949w\" sizes=\"(max-width: 750px) 100vw, 750px\" \/><figcaption class=\"wp-element-caption\">A fake version of Whales Market promoted by Google Ads\u00a0 \u00a0Source: Google<\/figcaption><\/figure>\n\n\n\n<p>Additionally, BleepingComputer reports that the malicious actors have reportedly registered multiple domains imitating <a href=\"https:\/\/whales.market\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Whales Market<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>, including the dormant [www.whaless.market].<\/p>\n\n\n\n<p>By imitating the interface of the legitimate Whales Market website, the counterfeit version deceives users into divulging their digital wallet credentials. However, the act of doing so triggers malicious programs that steal cryptocurrency from victims' wallets.<\/p>\n\n\n\n<p>This incident is indicative of recurring occurrences in which fraudulent individuals have advertised deceptive services via Google's platform.<\/p>\n\n\n\n<p>One example is the nearly $900,000 worth of cryptocurrency that an unidentified hacker siphoned from one of the hot wallets of Dallas Mavericks owner and billionaire investor Mark Cuban.<\/p>\n\n\n\n<p>Scammers used the &#8220;MS Drainer&#8221; wallet-draining service to steal an estimated $59 million in cryptocurrency from victims over the previous nine months in December 2023.<\/p>\n\n\n\n<p>Scammers targeted victims with bogus versions of well-known cryptocurrency websites, such as Orbiter Finance, Radient, Zapper, Lido, Stargate, and DefiLlama, via Google Ads.<\/p>\n\n\n\n<p>Although the perpetrators of this recent phishing campaign remain unidentified, it appears that Google is implementing measures to combat the fraudulent activity.<\/p>\n\n\n\n<p>Google initiated legal proceedings in April against Yunfeng Sun and Hongnam Cheung, both of Chinese nationality, because they misled users by offering counterfeit cryptocurrency investments via the <a href=\"https:\/\/coinscreed.com\/staging\/sharkbot-malware-reappears-on-google-play-store.html\" target=\"_blank\" rel=\"noreferrer noopener\">Google Play store<\/a>.<\/p>\n\n\n\n<p>Wallet drainers have emerged as a significant concern within the Web3 ecosystem. The developer of the &#8220;Inferno&#8221; drainer announced his retirement in November 2023, citing the theft of over $80 million from victims throughout the software's lifespan.<\/p>\n\n\n\n<p>The developer of &#8220;Monkey Drainer,&#8221; which had, to that point, facilitated the theft of an estimated $13 million, also declared retirement in March.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>According to a report by BleepingComputer, scammers are advertising fraudulent crypto websites using Google&#8217;s Ads platform. Google seems to be endorsing a malevolent cryptocurrency website that redirects users to a cloned fraudulent website, which exploits users&#8217; cryptocurrency using Google Ads, an online advertising platform that allows companies to display advertisements on Google&#8217;s search engine results [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":76638,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[9313,9894,12490],"class_list":["post-76626","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-google-ads","tag-phishing-scam","tag-scams-2"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/04\/image-121.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/76626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=76626"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/76626\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/76638"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=76626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=76626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=76626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}