Ads appearing across the Internet are attempting to scam users. Researchers have recently discovered that Google ads are delivering a sophisticated tech support scam that freezes the screens of both Windows and Mac devices, displaying urgent messages instructing users to call a bogus call center.
Scam Overview
The malicious ads have been displayed on various high-traffic sites, including maps, weather, real estate, document hosting, and sports websites. Users who called the provided number were pressured to pay hefty fees, grant remote access to their devices, or divulge personal information.
From August 31 to September 14, security firm Netskope observed users from 619 customer organizations clicking on these malicious ads. Fortunately, none were actually scammed as Netskope blocked the content. Approximately 62 percent of the organizations were based in the US, with Japan and Australia following as the second and third highest.
How the Scam Works
Netskope tracked over 250 Google Ads campaign IDs across at least 284 legitimate publisher sites. According to Netskope,
“"For the victim, that tradecraft turns an ordinary ad click into a browser that appears to seize up on a fake security warning."
The scam creates a sense of urgency by filling the screen with a warning, hiding the cursor, and disabling the usual exit keys. This leads users to believe their machine is broken, pressuring them to call the displayed number.
