Report: Malicious Ad on Google Links to Fake Password Site

[engine]

According to a report at ars Technica, an ad on Google from a verified advertiser linked to a fake password manager site. The sneaky imposter site used punycode to generate unicode characters which represented ASCII characters looking like the official password manager site.

Google has, of course, removed the site once it was reported, but it ran from last Saturday until Wednesday.

[arstechnica.com...]

[not2easy]

Terrific. I think there are likely others to be reported if that's all it takes to set it up.

[engine]

Embarrassing for Google, imho.

Let's hope there are no repercussions for those that might have hit the ad. If it's significant it could be a potential class action.