Malicious Google Ads Target Users Seeking Solutions to Printer Problems
Scammers are abusing Google ads to target users searching for help with printer problems, according to researchers at Malwarebytes.
The malicious ads claim to offer tech support for installing drivers used by HP and Canon printers.
“After clicking on a malicious ad, the website instructs you to enter your printer’s model number in order to download the required driver, which it proceeds to ‘install,’” the researchers write.
“This is entirely fake, and the only thing the website displays is a recorded animation that will always end up with the same error message.”
After the phony download animation, the site will display a message telling the user that a fatal error has occurred during installation, cautioning them that further installation attempts may damage the printer and void their warranty. The message contains a link to start a live chat with tech support, which will place the user in a call with the scammer.
The researchers note that frustrated users dealing with printer issues are more likely to disregard red flags while looking for a solution.
“There are many people that fall for these types of scams and entire armies of tech support agents working in poor conditions ready to defraud them,” Malwarebytes says. “The script is usually standard across scams, with the support agent impersonating a popular brand and requesting personal information from the victim. It is quite common for scammers to request and be granted remote access to the user’s computer. This gives them leverage to do a number of things, such as stealing data, locking the machine, or even using it to log into the victim’s bank account.”
Since printers are often used in corporate environments, these scams can also offer attackers an entry point into a company’s network.
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Malwarebytes has the story.
Will your users respond to phishing emails?
KnowBe4’s Phishing Reply Test (PRT) is a complimentary IT security tool that makes it easy for you to check to see if key users in your organization will reply to a highly targeted phishing attack without clicking on a link. PRT will give you quick insights into how many users will take the bait so you can take action to train your users and better protect your organization from these fraudulent attacks!
Here’s how it works:
- Immediately start your test with your choice of three phishing email reply scenarios
- Spoof a Sender’s name and email address your users know and trust
- Phishes for user replies and returns the results to you within minutes
- Get a PDF emailed to you within 24 hours with the percentage of users that replied
PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-security-test-partner?partnerid=001a000001lWEoJAAW