Security News > 2023 > January > Hackers push malware via Google search ads for VLC, 7-Zip, CCleaner

Hackers push malware via Google search ads for VLC, 7-Zip, CCleaner
2023-01-17 23:09

Hackers are setting up fake websites for popular free and open-source software to promote malicious downloads through advertisements in Google search results.

The distribution method was unknown at the time but separate reports in December from cybersecurity companies Trend Micro and Guardio revealed that hackers were abusing the Google Ads platform to push malicious downloads in search results.

Following NFT God's thread, BleepingComputer conducted its own research and uncovered that OBS is one in a long list of software that threat actors impersonate to push malicious downloads in Google Ads search results.

BleepingComputer also found a website filled with fake software downloads distributed solely via Google Ads search results.

We could not verify if the downloads were malicious but given that the domain is a typosquatted URL, the site blocks search engines from indexing content and promoting the downloads only through ads in search results, there is a strong indication of malicious activity.

Germán Fernández of cybersecurity company CronUp provides a list of 70 domains that are distributing malware through Google Ads search results by impersonating legitimate software.


News URL

https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Google 102 256 4320 4678 741 9995
7 ZIP 2 0 0 12 0 12