this post was submitted on 19 Oct 2023
21 points (100.0% liked)

Hacker News

4123 readers
3 users here now

This community serves to share top posts on Hacker News with the wider fediverse.

Rules0. Keep it legal

  1. Keep it civil and SFW
  2. Keep it safe for members of marginalised groups

founded 1 year ago
MODERATORS
 

There is a discussion on Hacker News, but feel free to comment here as well.

top 3 comments
sorted by: hot top controversial new old
[–] refurbishedrefurbisher@lemmy.sdf.org 4 points 1 year ago (1 children)

I started using Wikipedia as a place to find legit links.

It's sad that this is becoming a completely viable way to find legit websites. Donate to Wikipedia if you have the ability.

[–] autotldr@lemmings.world 1 points 1 year ago

This is the best summary I could come up with:


Google has been caught hosting a malicious ad so convincing that there’s a decent chance it has managed to trick some of the more security-savvy users who encountered it.

Combining the ad on Google with a website with an almost identical URL creates a near perfect storm of deception.

“Users are first deceived via the Google ad that looks entirely legitimate and then again via a lookalike domain,” Jérôme Segura, head of threat intelligence at security provider Malwarebytes, wrote in a post Wednesday that revealed the scam.

The ads were paid for by an outfit called Digital Eagle, which the transparency page says is an advertiser whose identity has been verified by Google.

When in doubt, people can open a new browser tab and manually type the URL, but that’s not always feasible when they’re long.

Another option is to inspect the TLS certificate to make sure it belongs to the site displayed in the address bar.


The original article contains 422 words, the summary contains 157 words. Saved 63%. I'm a bot and I'm open source!