Google search bug causes fraudulent phone calls to target Apple and Microsoft websites

Yesterday, the cybersecurity company Malwarebytes issued an alert, revealing a new method of online fraud. The fraud gang took advantage of a loophole in Google's advertising system to implant fake customer service phone numbers in the search results of official websites such as Microsoft and Apple.

It is reported that the attacker cleverly added hidden parameters to the link by purchasing Google ads. When the user clicks on the seemingly official ad link, the page will automatically insert the fraudulent phone number. For example, Apple's official website page may be injected with numbers such as "+1-805-749-2108" to disguise as official customer service. These numbers are embedded in the page in a striking style, which is extremely deceptive.

Malwarebytes researchers pointed out that although Google ads display the domain name of the target website, they allow invisible parameters to be added to the right side of the address bar, which is exactly the opportunity for attackers. If users mistakenly dial a fake number, they may leak personal information or payment card details and suffer financial losses.

It is worth noting that users with visual impairment, cognitive decline or rush are more susceptible to fraud. Malwarebytes browser security tools can already identify such attacks, but experts recommend that avoiding clicking on Google ad links and visiting websites through natural search results is the fundamental way to prevent them.