Cybercriminals are targeting digital marketing professionals by purchasing fake Google ads, also known as malvertising.
This scam begins when you search Google for the login page for Semrush (a popular online digital marketing platform). The search results include what appears to be a sponsored Semrush ad. The ad is one of the top search results, and if you click it, you are taken to what seems to be the Semrush login page. It looks genuine, but it’s a bit unusual since it only allows you to log in using your Google username and password.
That’s because this isn’t a real login page. If you enter your Google login information, cybercriminals will be able to access your Google account, which can contain your credit card number and other business information. Then, they can use your account to steal your money or even trick others into sending them personal and financial information.
To avoid falling victim to this malvertising scam, here’s what we suggest:
Avoid clicking on promoted or sponsored Google results. Anyone can purchase a Google ad, so navigating to the official website is always safer.
Always check URLs to ensure you are visiting official websites, and remember to bookmark your frequently visited login pages.
While this scam is directed toward marketers, remember that cybercriminals can use fake Google ads to target professionals in many industries. Always think before you click.
Reach out to our experts to learn about comprehensive cyber security awareness training and phishing simulations that empower your workforce to keep your organization secure.
