Security News > 2024 > March > Google's new AI search results promotes sites pushing malware, scams

Google's new AI-powered 'Search Generative Experience' algorithms recommend scam sites that redirect visitors to unwanted Chrome extensions, fake iPhone giveaways, browser spam subscriptions, and tech support scams.
Earlier this month, Google began rolling out a new feature called Google Search Generative Experience in its search results, which provides AI-generated quick summaries for search queries, including recommendations for other sites to visit related to the query.
As SEO consultant Lily Ray first spotted, Google's SGE is recommending spammy and malicious sites within its conversational responses, making it easier for users to fall for scams.
When clicking on the site in the Google search results, visitors will go through a series of redirects until they reach a scam site.
It is unclear how these low-quality sites are making it into Google's AI-powered search algorithms.
As AI becomes a more significant part of how we search online, it is becoming increasingly clear that we cannot automatically trust the information these algorithms produce and must verify sites before visiting them.
News URL
Related news
- Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes (source)
- Fake Homebrew Google ads target Mac users with malware (source)
- GhostGPT: Uncensored Chatbot Used by Cyber Criminals for Malware Creation, Scams (source)
- Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations (source)
- Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts (source)
- Google says hackers abuse Gemini AI to empower their attacks (source)
- DeepSeek AI tools impersonated by infostealer malware on PyPI (source)
- Crypto-stealing iOS, Android malware found on App Store, Google Play (source)
- Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking (source)
- Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google Play (source)