cross-posted from: https://lemmy.ml/post/4912712

Most people know at this point that when searching for a popular software package to download, you should be very careful to avoid clicking on any of the search ads that appear, as this has become an extremely common vector for distributing malware to unsuspecting users.

If you thought that you could identify these malicious ads by checking the URL below the ad to see if it directs to the legitimate site, think again! Malware advertisers have found a way to use Google’s Ad platform to fake the URL shown with the ad to make it appear like a legitimate ad for the product when in fact, clicking the ad will redirect to an attacker controlled site serving malware.

Don’t click on search ads or, even better, use an ad-blocker so that you never see them in the first place!

  • Semi-Hemi-Demigod@kbin.social
    35·
    1 year ago

    I can’t believe we’ve gotten to the point where running random code on your computer isn’t just considered normal, we also think blocking said random code is bad for business.

  • Melody Fwygon@lemmy.oneEnglish
    21·
    1 year ago

    I’ve been using a SearXNG locally-hosted instance using WSL/Podman. Behind a VPN of course; and also using TrackMeNot to generate a steady slow stream of garbage searches to block general query tracking.

    I’m loving it to bits; as I don’t have bullshit in my search results and I immediately find what I need; as I can query all the engines I want.

  • halcyondays@midwest.socialEnglish
    9·
    1 year ago

    Seen a few mentions of ad blocking, but I’ll throw one more option out there - DNS servers that block malware and c2 domains. I use quad9 as the upstream for my pihole, but cloudflare’s 1.1.1.2 is an option as well.

  • kitonthenet@kbin.social
    81·
    1 year ago

    But I was assured by IT pros that responsibility to stop phishing tested ultimately on the user!

  • ebits21@lemmy.caEnglish
    71·
    1 year ago

    Use pihole. If I accidentally click a google ad they don’t work anyway.