FBI: Bodong Ads On The Tracing Field Target Cryptocurrency Platform

Cybercriminals create fake advertisements to steal user money (photo: Unsplash)

JAKARTA - The Federal Bureau of Investigation (FBI) reports that cybercriminals are now using advertising services in search browsers to steal user credentials.

This ad service is used to disguise as a brand and direct users to malicious sites that host ransomware and steal login credentials and other financial information.

"Cyclists buy ads that appear in internet search results using domains similar to actual businesses or services," the FBI said on Twitter.

Cyber criminals are purchasing search engine advertisements to impersonate actual businesses and tricking users into providing login credentials or downloading malware onto their computers on lookalike webpages. Learn how to protect yourself at https://t.co/scQaVRWOna pic.twitter.com/B53I1TggzN

— FBI (@FBI) December 22, 2022

Then, when the user traces the business or service, the ad appears at the top of the search results. This ad is then linked to a web page that looks identical to the official business web page being imitated.

"In the case where users are looking for a program to download, the scam website has a link to download software that is actually malware. The download page looks legitimate and the download itself is named after the program the user wants to download," he added.

The FBI also claims that the ad has been used to emulate websites involved in finance, particularly cryptocurrency exchange platforms.

These malicious sites ask users to enter entry credentials and financial information, and then provide access to criminals to steal funds.

"Although search engine ads are not malicious, it is important to be careful when accessing web pages via advertised links," the FBI said.