Malwarbytes is pointing out a malvertising campaign that leverages popular website names to direct victims to call a number where they are scammed into buying unneeded services and giving up personal information.
The scammers are using Google AdWords as their starting point, Malwarebytes said. By bidding up a keyword, such as YouTube Channel, they can push it to the top of a Google search page where they are more visible. Detection is difficult as hovering over the supplied URL, www.youtube.com, does not reveal a false address. However, when clicked the ad launches a screen saying the PC has a Blue Screen of Death error prompting the person to call a service number.
Once on the phone the victim can be talked into buying expensive “fixes” for the non-existent problem and also have their identity stolen using the information they supply.
Malwarebytes reported the issue to Google and the ads were pulled.
