Scammers hijack websites of Bank of America, Netflix, Microsoft, and more to insert fake phone number | Malwarebytes (www.malwarebytes.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 18 Jun 12:42
https://sh.itjust.works/post/40460399

#cybersecurity

threaded - newest

Warl0k3@lemmy.world on 18 Jun 13:18 next collapse

Wait, so are they injecting the number into the actual legit support website, or does this only show up in the google search results as the wrong number, but following the link directs you to the legit site? The article is kinda unclear on which it is.

Dolphinfreetuna@lemmy.world on 18 Jun 13:42 next collapse

My understanding is they buy sponsored ads, the link goes to a fake Netflix support site, and you call their phone number.

HubertManne@piefed.social on 18 Jun 13:46 next collapse

The title makes is sound like that but its search site paid searches.

m4ylame0wecm@lemmy.zip on 18 Jun 13:59 collapse

Heres thr gist I got from it: Scammer buys sponsored link, link has extra bits on URL.

Website operator’s page loads, but blindly accepts extra info from the clicked URL (for prefilled search terms) and displays that in their own search bar’s text input field.

The Apple and HP examples show this decently, the scammer text/phone number is just sitting as search input.

Blame whoever, but seems like this is on the website operators/developers as much as $boogeyManSearchEngine.

Warl0k3@lemmy.world on 18 Jun 22:49 collapse

That makes sense, thank you!

zero_spelled_with_an_ecks@programming.dev on 18 Jun 15:42 next collapse

They must only be going after the generations that will willingly make a phone call.

[deleted] on 18 Jun 18:17 collapse

.