Beware of Google's Most Damaging Scams
Brief:
Google has shared a new warning about scams. These scams use tricks like hiding real content (called cloaking) and using AI to take advantage of popular events. The report says that scams are getting smarter and using scary methods to fool people.
- Understanding Cloaking and Its Dangers
- Scammers Use AI to Exploit Current Events
- Google's Efforts to Combat Scams
Understanding Cloaking and Its Dangers
Google has revealed a new report outlining the most common techniques threat actors are using against victims. One of the techniques, known as ‘Cloaking,’ deceives users into disclosing sensitive information.
The technique uses tools called ‘cloakers’ to show different content to different users based on identifying information such as IP addresses. Often, cloaking will show one version of a landing page or website to search engines and bots, and another version to real human users.
“Cloaking is specifically designed to prevent moderation systems and teams from reviewing policy-violating content, allowing them to deploy the scam directly to users,” Laurie Richardson, Vice President, Trust & Safety at Google, wrote in the report.
Scareware and Malware
Cloaking does have legitimate uses, such as for advertisers who want to prevent their pages from being scraped by bots, or who want to hide their strategies from competitors. However, Google has observed scammers using cloaking tools to redirect users who click an ad to scareware sites.
This then tricks users into believing their device is infected with malware, or that their account has been blocked due to unauthorized activity, tricking them into a false ‘customer support’ site where they reveal sensitive information.
“The landing pages often mimic well-known sites and create a sense of urgency to manipulate users into purchasing counterfeit products or unrealistic products,” Google says.
Scammers Use AI to Exploit Current Events
Other techniques outlined were the exploitation of major events. Scammers take advantage of significant events such as elections, sports fixtures, or humanitarian disasters. The well-established technique is being bolstered by AI tools, which are able to quickly respond to breaking news and advertise false products and services.
Elsewhere, Google also flagged fake charity scams, which aim to defraud people looking to donate to relief efforts. These scammers set up appeals to seem legitimate, with AI tools used to produce huge amounts of content that overwhelm users and deceive them into clicking malicious links.
Google's Efforts to Combat Scams
“Preventing user harm from malicious scams requires effective cooperation across the online ecosystem,” Richardson concluded. “Bad actors are constantly evolving their tactics and techniques. We’re sharpening our detection and enforcement techniques to meet these threats, enhancing our proactive capabilities, and ensuring we have robust and fair policies in place to protect people.”
For the full report by Techradar, you can read the original article here: