Delivery technique · MITRE ATT&CK T1583.008, T1608.006
Malvertising and SEO poisoning
Paid ads and manipulated search results that send people to fake download sites, fake support numbers, or fake banks.
How it works
- Attackers buy ads or game rankings for brand and software searches.
- The top result looks official.
- The site delivers malware or a scam phone number.
Defenses
- Download software only from the vendor's own domain.
- Bookmark banking and support pages.
- Use browser and DNS filtering that blocks known malvertising.
Reference: FBI IC3 PSA on search engine advertising abuse