Google Ads are being used to steal cryptocurrency, according to a new report. The ads are appearing on websites that sell cryptocurrencies, and they offer a way to earn money without doing any work. The ads are using deceptive tactics to get people to click on them. They’re using fake promises of high rewards for doing little work, and they’re also using scare tactics to try and get people to stop using cryptocurrencies. Google Ads have always been a way for companies to reach out to potential customers. But this kind of advertising is going too far. It’s stealing people’s money, and it’s not fair. Google needs to do something about it ..
The report of the new scam comes from Check Point Research (CPR) (via The Verge), and it says that it has seen more than $500k worth of crypto stolen in a single weekend, thanks to these fake crypto wallets.
Essentially, this is a phishing scam where the malicious individuals buy a Google ad and create a site that looks like a popular crypto wallet. Specifically, the scammers target Phantom and MetaMask wallets, which are popular for the Solana and Ethereum ecosystems. However, if the scam keeps seeing success, you should also be careful with other wallets and currencies.
When someone searches on Google for these wallets, an ad will appear at the top of the search results linking to a site that looks like the actual wallet. Upon going to the website, it will trick users into providing their wallet key so the attacker can steal their cryptocurrency. If they try to create a new wallet, the website actually links to the attacker’s existing wallet, and any funds they place in will go directly to the attacker.
As far as what cryptocurrency owners can do, CPR advises them to stay on high alert. “I strongly urge the crypto community to double-check the URLs they click on and avoid clicking on Google Ads related to crypto wallets at this time,” said Oded Vanunu, Head of Products Vulnerabilities Research at Check Point.
Whether you’re dealing with cryptocurrency or any other phishing scam, you should always check the URL to make sure you’re on the website you’re supposed to be. Don’t ever give out your wallet passphrase or key to a website that you’re not sure about. Also, scroll down a little further and click the actual search result instead of an ad, as you can be more confident in the validity of the website.
