Sound Networks IT Support
Sound Networks IT Services
IT Support
Managed IT Services
Cyber Security
AI
Insights
Company

Request free IT audit

This site uses cookies for functionality and analytics Manage Close

Scammers are using Google Ad's

Search engines display sponsored links at the top of results pages, which users assume are legitimate.

Scammers exploit this by buying ads targeting trusted brand names, software, or login pages (such as banks or Microsoft 365) to push fake sites above official ones.

How the scam works

Known as malvertising (malicious advertising), this tactic uses convincing copy and URLs to mimic legitimate brands. Clicking these ads directs users to fake sites that either steal credentials or distribute malware disguised as common software like video players or PDF readers.

Why it succeeds

  • Prominent Placement: Sitting above organic search results, these links appear trustworthy—especially since the user initiated the search.
  • Review Evasion: Attackers display harmless content to ad reviewers whilst serving malicious pages to regular visitors.

Scope of the threat

Google's 2025 Ads Safety Report revealed that over 8.3 billion policy-violating ads were blocked or removed, alongside 24.9 million account suspensions and 602 million scam-related ad removals. AI is increasingly used by criminals to generate deceptive campaigns at scale, frequently targeting popular programs such as VLC, 7-Zip, CCleaner, and Google apps.

Business risks

Info-stealing malware extracts saved browser passwords, cookies, and session tokens—allowing attackers to bypass multi-factor authentication (MFA). For organisations, the primary threat stems from two everyday scenarios:

  • Software Downloads: Users install info-stealing malware disguised as legitimate software.
  • Credential Theft: Users enter login details into fake authentication portals.

Protection Strategies

  • Skip Sponsored Links: Scroll down to organic, non-sponsored search results.
  • Avoid Downloading via Ads: Type the official web address directly into the browser.
  • Bookmark Critical Sites: Use saved bookmarks for online banking, Microsoft 365, and key services.
  • Keep Systems Updated: Enable automatic updates for operating systems and web browsers.
  • Raise Awareness: Educate staff on the risks associated with search engine ads.

Frequently Asked Questions

Are top search ads vetted and safe?

No. Whilst ad networks remove billions of malicious ads annually, scammers bypass security checks by altering what reviewers see. The "Sponsored" label does not guarantee safety.

What is malvertising?

Malvertising is the practice of purchasing online ad space to redirect users to malicious sites that steal credentials or deploy malware.

How do I download software safely?

Navigate directly to the developer's official website by typing the URL into your address bar, or use non-sponsored search results. Avoid downloading files via ad links.

What should I do if someone clicks a scam ad?

  • Visited only: Close the browser tab without entering data.
  • Entered credentials: Change the password immediately and ensure MFA is enabled.
  • Downloaded a file: Disconnect the device from the network and arrange an IT inspection.

Do ad blockers help?

Yes. Ad blockers filter out sponsored listings before they load, reducing accidental clicks. However, they should be paired with safe browsing habits rather than relied upon exclusively.

Watch Guard network security partner
Datto ticketing and management system
Huntress security partner
Dell Technologies and services
Hyper-V routing technologies
BitDefender defending your hardware
Microsoft 365 professional services
3CX VoIP phone systems
Veeam partner
Signable partner
Cyber Essentials Certification
Power Automate automation workflows
GTIA
Watch Guard network security partner
Datto ticketing and management system
Huntress security partner
Dell Technologies and services
Hyper-V routing technologies
BitDefender defending your hardware
Microsoft 365 professional services
3CX VoIP phone systems
Veeam partner
Signable partner
Cyber Essentials Certification
Power Automate automation workflows
GTIA
Need Help?