Google searches are becoming a bigger target of cybercriminals with the rise of ‘malvertising’

Published

10 months ago

September 5, 2024

admin

Hackers are increasingly using online ads for malicious purposes. Often, it’s happening through routine Google searches.

These schemes are dubbed malvertising, and cyber criminals are striking more often and with increased sophistication. In fall 2023, cybersecurity software firm Malwarebytes tracked a 42% increase month-over-month in malvertising incidents in the U.S. All types of brands are being targeted, whether it’s for phishing purposes or for actual malware, said Jérôme Segura, senior director of research at Malwarebytes. “What I’m seeing is just the tip of the iceberg,” he said.

Many of these rogue ads appear as sponsored content during a search engine query on a desktop or mobile device. But malicious code can also be hidden in ads that appear on mainstream websites consumers routinely visit. Some of these ads will only ensnare consumers who click on them, but in some cases, people can be vulnerable in a more passive way — sometimes just by visiting an infected site, said Erich Kron, security awareness advocate for KnowBe4, a security awareness and training company.

Corporate employees can also be targets of malvertising, Segura said. He cited a few actual examples that were recently uncovered involving big companies. Lowe’s staff members were targeted via a Google ad for an employee portal claiming to be associated with the retailer. Clicking on the link, “myloveslife.net,” which contains a misspelling of the company’s name, took users to a phishing page with Lowe’s logo. This had the potential to confuse employees since many don’t know offhand the URL for their internal website. “You see the brand, even the official logo of that brand, and for you it’s enough to think it’s real,” Segura said.

Segura also cited an ad meant to impersonate Salesforce-owned communication tool Slack. Initially, by clicking on the ad, he was redirected to a price page on Slack’s official website. But suspecting bad actors were at play, Segura dug deeper and uncovered an impersonation ploy, which involved trying to convince unsuspecting users to download something purporting to be the Slack app.

It’s not Google’s fault, but don’t trust it

Malvertising is not new, but cybercriminals are getting smarter and the ads are often so realistic that it’s easy to be duped. The problem is exacerbated by the fact that so many people use and trust Google as a search engine, where many of the malicious ads can be found. It’s not a problem with Google, per se; malicious ads can also show up in queries using other search engines like Microsoft’s Bing. It’s just that Google is such a widely used search engine and people trust it and let their guard down. “You see something appearing on a Google search, you kind of assume it is something valid,” said Stuart Madnick, professor of information technology at MIT Sloan School of Management.

Consumers can also fall prey to malicious ads on trusted websites they visit regularly. Many of these ads are legitimate, but some bad ones can slip through the cracks. “It’s like the post office. Does the mailman check every letter you get to make sure it’s really from Publishers Clearing House?” Madnick said.

Be very careful about where and when you click

Consumers can take steps to protect themselves against malvertising attempts. For instance, they should avoid clicking on sponsored links that come up during an internet search. Often, the first ad below the sponsored one will be the product they are looking for, and since it isn’t sponsored, there’s less chance of being sidelined by malicious code or a phishing attempt.

If you do click on a sponsored link, check the URL at the top of the web page to make sure it’s really where you meant to be before taking any other actions. For example, if you’re trying to visit Gap.com, make sure you’re not really on Gaps.com. Consumers who find themselves on a suspicious site should close the window immediately, said Avinash Collis, assistant professor at Carnegie Mellon University’s Heinz College. In most cases, this will avoid further trouble, he said.

Consumers also need to be careful about clicking ads they see on trusted websites, Kron said. They may, for instance, see ads for products that are much lower in cost than elsewhere. But Kron recommends not clicking and instead visiting the trusted website of the product seller. Most of the time, consumers will be able to search on the provider’s site if a special deal exists, or the deal will be highlighted on the main page of the trusted website, he said.

Also avoid calling a telephone number listed in a sponsored ad because it could be a fake telephone number. If you call it, cyber thieves could gain access to your computer or your personal information, depending on the scheme, said Chris Pierson, CEO of BlackCloak, a cybersecurity and privacy platform that provides digital executive protection for corporate executives.

Consumers should make sure they are calling a number from official product documentation they have in their possession, Pierson said. Alternatively, consumers could visit the company’s home page for this information. “Doing a [web] search could return results that are not sponsored by the company and telephone numbers that are associated with cybercriminals. All it takes to get an ad out there is money and, of course, cybercriminals that are stealing money, have the ability to pay for that bait,” Pierson said.

Avoid ‘drive-by-downloads’

Consumers should also make sure the operating system and internet browsers are up-to-date on their computer and mobile phone.

So-called drive-by-downloads, which can impact people who merely visit a website infected with malicious codes, generally rely on a vulnerability in the user’s browser. This is not as much of a threat for people who keep their browsers and browser extensions up-to-date, Kron said.

Consumers could also consider installing anti-malware software on their computer and phone. Another option is to avoid ads by installing an ad blocker extension such as uBlock Origin, a free and open-source browser extension for content filtering, including ad blocking. Some consumers may also opt to install a privacy browser such as Aloha, Brave, DuckDuckGo or Ghostery on their personal devices. Many privacy browsers have embedded ad blockers; consumers may still see sponsored ads, but they will see fewer of them, which minimizes the chances of malvertising.

Consumers who come across suspicious ads should report them to the applicable search engine for investigation and removal if deemed malicious, Collis said. This can help protect other people from being ensnared.

Proper safety precautions are especially important since there are millions of ads on the internet and cyber thieves are relentless. “You should assume that this could happen to you no matter how careful you are,” Madnick said.

Technology

Amazon deploys its 1 millionth robot in a sign of more job automation

Published

3 hours ago

July 2, 2025

admin

Amazon deploys its 1 millionth robot in a sign of more job automation

An Amazon logistics center in Mecklenburg-Western Pomerania, Dummerstorf, Germany, on Nov. 27, 2024.

Picture Alliance | Picture Alliance | Getty Images

Amazon announced Monday its millionth worker robot, and said its entire fleet will be powered by a newly launched generative artificial intelligence model. The move comes at a time when more tech companies are cutting jobs and warning of automation.

The million robot milestone — which joins Amazon’s global network of more than 300 facilities — strengthens the company’s position as the world’s largest manufacturer and operator of mobile robotics, Scott Dresser, vice president of Amazon Robotics, said in a press release.

Meanwhile, Dresser said that its new “DeepFleet” AI model will coordinate the movement of its robots within its fulfillment centers, reducing the travel time of the fleet by 10% and enabling faster and more cost-effective package deliveries.

Amazon began deploying robots in its facilities in 2012 to move inventory shelves across warehouse floors, according to Dresser. Since then, their roles in factories have grown tremendously, ranging from those able to lift up to 1,250 pounds of inventory to fully autonomous robots that navigate factories with carts of customer orders.

Meanwhile, AI-powered humanoid robots — designed to mimic human movement and shape — could be deployed this year at factories owned by Tesla.

Job security fears

But although advancements in AI robotics like those working in Amazon facilities come with the promise of productivity gains, they have also raised concerns about mass job loss.

A Pew Research survey published in March found that both AI experts and the general public see factory workers as one of the groups most at risk of losing their jobs because of AI.

That’s a concern Dresser appeared to attempt to address in his statements.

“These robots work alongside our employees, handling heavy lifting and repetitive tasks while creating new opportunities for our front-line operators to develop technical skills,” Dresser said. He added that Amazon’s “next-generation fulfillment center” in Shreveport, Louisiana, which was launched late last year, required 30% more employees in reliability, maintenance and engineering roles.

However, the news of Amazon’s robot expansion came soon after CEO Andy Jassy told CNBC that Amazon’s rapid rollout of generative AI will result in “fewer people doing some of the jobs that the technology actually starts to automate.”

Jassy said that even as AI eliminates jobs in certain areas, Amazon will continue to hire more employees in AI, robotics and elsewhere. But in a memo to employees earlier in June, the CEO had admitted that he expects the company’s workforce to shrink in the coming years in light of technological advancements.

The decline may have already begun. CNBC reported that Amazon cut more than 27,000 jobs in 2022 and 2023, and had continued to make more targeted cuts across business units.

Other big tech CEOs such as Shopify’s CEO Tobi Lutke also recently warned of the impact that AI will have on staffing. That comes as a vast array of firms investing in and adopting AI execute rounds of layoffs.

According to Layoffs.fyi, which tracks technology industry layoffs, 551 companies laid off roughly 153,000 employees last year. And a World Economic Forum report in February found that 48% of U.S. employers plan to reduce their workforce due to AI.

Technology

Chipmakers get larger tax credits in Trump’s latest ‘big beautiful bill’

Published

7 hours ago

July 2, 2025

admin

Chipmakers get larger tax credits in Trump’s latest ‘big beautiful bill’

U.S. President Donald Trump (right) and C.C. Wei, chief executive officer of Taiwan Semiconductor Manufacturing Co. (left), shake hands during an announcement of an additional $100 billion into TSMC’s U.S. manufacturing at the White House in Washington, DC, U.S., on March 3, 2025.

Bloomberg | Bloomberg | Getty Images

The latest version of U.S. President Donald Trump’s “big beautiful bill” could make it cheaper for semiconductor manufacturers to build plants in the U.S. as Washington continues its efforts to strengthen its domestic chip supply chain.

Under the bill, passed by the Senate Tuesday, tax credits for those semiconductor firms would rise to 35% from 25%. That’s more than the 30% increase that had made it into a draft version of the bill.

Companies eligible for the credits could include chipmakers such as Intel, Taiwan Semiconductor Manufacturing Company and Micron Technology, provided that they expand their advanced manufacturing in the U.S. ahead of a 2026 deadline.

The new provisions expand on tax incentives under the 2022 CHIPS and Science Act, which provided grants of $39 billion and loans of $75 billion for U.S.-based semiconductor manufacturing projects.

But before the expanded credits come into play, Trump’s sweeping domestic policy package will have to be passed again in the House, which narrowly passed its own version last month. The president has urged lawmakers to get the bill passed by July 4.

Trump versus Biden

Since Trump’s first term, Washington has been trying to onshore more of the advanced semiconductor supply chain from Asia, support its domestic players and limit China’s capabilities.

Although tax provisions in Trump’s sweeping policy bill expand on those in the Biden administration’s CHIPS Act, his overall approach to the semiconductor industry has been different.

Earlier this year, the president even called for a repeal of the CHIPS Act, though Republican lawmakers have been reluctant to act on that front. Still, U.S. Commerce Secretary Howard Lutnick said last month that the administration was renegotiating some of the Biden administration’s grants.

The chip industry wants more clarity around policymaking, says 'Chip War' author Chris Miller

Trump has previously stated that tariffs, as opposed to the CHIPS Act grants, would be the best method of onshoring semiconductor production. The Trump administration is currently conducting an investigation into imports of semiconductor technology, which could result in new duties on the industry.

In recent months, a number of chipmakers with projects in the U.S. have ramped up planned investments there. That includes the world’s largest contract chipmaker, TSMC, as well as American chip companies such as Nvidia, Micron and GlobalFoundries.

According to Daniel Newman, CEO at tech advisory firm Futurum Group, the threat of Trump’s tariffs has created more urgency for semiconductor companies to expand U.S. capacity. If the increased investment tax credits come into law, those onshoring efforts are only expected to accelerate, he told CNBC.

“Given the risk of tariffs, increasing manufacturing in the U.S. remains a key consideration for these large semiconductor companies,” Newman said, adding that the tax credits could be seen as an opportunity to offset certain costs related to U.S.-based projects.

Technology

Tesla shares drop on Musk, Trump feud ahead of Q2 deliveries

Published

12 hours ago

July 2, 2025

admin

Tesla shares drop on Musk, Trump feud ahead of Q2 deliveries

Elon Musk, chief executive officer of Tesla Inc., during a meeting between US President Donald Trump and Cyril Ramaphosa, South Africa’s president, not pictured, in the Oval Office of the White House in Washington, DC, US, on Wednesday, May 21, 2025.

Jim Lo Scalzo | Bloomberg | Getty Images

Tesla shares have dropped 7% from Friday’s closing price of $323.63 to the $300.71 close on Tuesday ahead of the company’s second-quarter deliveries report.

Wall Street analysts are expecting Tesla to report deliveries of around 387,000 — a 13% decline compared to deliveries of nearly 444,000 a year ago, according to a consensus compiled by FactSet. Prediction market Kalshi told CNBC on Tuesday that its traders forecast deliveries of around 364,000.

Shares in the electric vehicle maker had been rising after Tesla started a limited robotaxi service in Austin, Texas, in late June and CEO Elon Musk boasted of its first “driverless delivery” of a car to a customer there.

The stock price took a turn after Musk on Saturday reignited a feud with President Donald Trump over the One Big Beautiful Bill Act, the massive spending bill that the commander-in-chief endorsed. The bill is now heading for a final vote in the House.

That legislation would benefit higher-income households in the U.S. while slashing spending on programs such as Medicaid and food assistance.

Musk did not object to cuts to those specific programs. However, Musk on X said the bill would worsen the U.S. deficit and raise the debt ceiling. The bill includes tax cuts that would add around $3 trillion to the national debt over the next decade, according to an analysis by the Congressional Budget Office.

The Tesla CEO has also criticized aspects of the bill that would cut hundreds of billions of dollars in support for renewable energy development in the U.S. and phase out tax credits for electric vehicles.

Such changes could hurt Tesla as they are expected to lower EV sales by roughly 100,000 vehicles per year by 2035, according to think tank Energy Innovation.

The bill is also expected to reduce renewable energy development by more than 350 cumulative gigawatts in that same time period, according to Energy Innovation. That could pressure Tesla’s Energy division, which sells solar and battery energy storage systems to utilities and other clean energy project developers.

Trump told reporters at the White House on Tuesday that Musk was, “upset that he’s losing his EV mandate,” but that the tech CEO could “lose a lot more than that.” Trump was alluding to the subsidies, incentives and contracts that Musk’s many businesses have relied on.

SpaceX has received over $22 billion from work with the federal government since 2008, according to FedScout, which does federal spending and government contract research. That includes contracts from NASA, the U.S. Air Force and Space Force, among others.

Tesla has reported $11.8 billion in sales of “automotive regulatory credits,” or environmental credits, since 2015, according to an evaluation of the EV maker’s financial filings by Geoff Orazem, CEO of FedScout.

These incentives are largely derived from federal and state regulations in the U.S. that require automakers to sell some number of low-emission vehicles or buy credits from companies like Tesla, which often have an excess.

Regulatory credit sales go straight to Tesla’s bottom line. Credit revenue amounted to approximately 60% of Tesla’s net income in the second quarter of 2024.

WATCH: Threats to SpaceX & Tesla as Musk, Trump feud heats up