Another FBI announcement about search ads is up: Cyber Criminals Impersonating Employee Self-Service Websites to Steal Victim Information and Funds.

Cyber criminals use advertisements that imitate legitimate companies to misdirect targets conducting an internet search for a specific website. The fraudulent URL appears at the top of search results and mimics the legitimate business URL with minimal differences, such as a minor misspelling. When targets click on the fraudulent advertisement link, they are redirected to a phishing website that closely mirrors the legitimate website. When the target enters login credentials, the cyber criminal intercepts the credentials.

And the FBI repeats the advice from last time (don’t make me tap the sign).

Use an ad blocking extension when performing internet searches.

The previous announcement has been removed but the FBI is still on about this problem.

It is possible to fix Google Search to remove the ads, among other things. For now, as the FBI points out, the safest thing to do is block the ads now and turn them back on for legit sites later. And it is still a good idea to get into the habit of using a browser bookmark, not the search box, to navigate to sites you have an account on, especially SaaS applications and financial services sites.

The trademark policy problem

If you remember the old Acceptable Ads idea, the search ads used to be an example of online ads trying to do the right thing, and should go un-blocked. Now, blocking the search ads is essential, even if you block no other ads. (More: Search malvertising protection using enterprise policies) What the hell happened? Investors did. Google and Meta form a duopoly that has squeezed other companies out of the online advertising business, but the market expects them to keep growing at double-digit rates. Transformative innovation is priced in to Google’s stock price—but since they’re not delivering the next Internet or the next smartphone, they need to keep filling in the gaps with crime. Google management is like a losing gambler stealing larger and larger amounts of money from work. When the next big bet pays off they’ll be able to put it all back, right?

Google has made a series of changes to the Trademark Policy to make it easier and easier for one advertiser to copy another’s trademarks without getting caught. The owner of the infringed marks now has to identify and report the infringement. But, because Google uses machine learning to match the infringing ads with likely fraud and malware victims, the trademark owner isn’t likely to see them. And, of course, even if the one ad does get removed from the system, or one ad account gets kicked off, the malware and scam operators have more accounts ready to go. And all those extra malware and scam ad accounts are bidding up the price of Google ads for every other advertiser, so Number Go Up what if Ed Zitron is an optimist? and Google management needs to keep playing for another quarter.

Email spammers in the 1990s had a party line on spam filtering: it was just a priority for radical email administrators, who were over-blocking exciting offers that regular people would be happy to get. But that’s not what happened. Normal people’s positions on spam ended up roughly tracking the early adopter preferences. Today that’s roughly what’s happening with ad blocking. People don’t know the details, but they’re starting to recognize a dirty business when they see it. More: The traffic and revenue crisis for news is a symptom of Big Tech’s economy-wide trust collapse – RJI

(source of the title for this post: Winners Don’t Use Drugs)