<?xml version="1.0" encoding="UTF-8"?>
<blog-post>
  <author-id type="integer">71176</author-id>
  <blog-comments-count type="integer">4</blog-comments-count>
  <blog-post-status-id type="integer">3</blog-post-status-id>
  <body-format>html</body-format>
  <body-formatted>&lt;p&gt;According to InternetNews, &lt;a href="http://www.internetnews.com/search/article.php/3798021"&gt;scammers are purchasing legitimate-looking AdWords campaigns&lt;/a&gt; and using them to redirect searchers who click on those ads to malicious websites. Some contain viruses and trojans that have been designed to avoid detection by anti-virus programs. Some of these malicious websites even employ '&lt;em&gt;scareware&lt;/em&gt;' to trick victims into believing that they're providing anti-virus software.&lt;/p&gt;
&lt;p&gt;One might think that this type of abuse of AdWords would be easy for Google to thwart but that appears not to be the case.&lt;/p&gt;
&lt;p&gt;According to Ryan Sherstobitoff of anti-virus vendor Panda Software, "&lt;em&gt;If you do a Google search using the term free antivirus 2009, all the sponsored 
links point back towards scareware. Now, instead of stealing your banking information, these spammers infect your PC 
and make you pay for the fake anti-malware immediately.&lt;/em&gt;"&lt;/p&gt;
&lt;p&gt;Making matters worse, traffic management applications are used to help scammers avoid detection. When someone clicks on a scammer's AdWords ad, for instance, sometimes they'll be redirected to a legitimate website. Thus, even if Google receives a complaint, it might not immediately be able to confirm the complaint.&lt;/p&gt;
&lt;p&gt;While the sophistication and ingenuity of online scammers isn't surprising, the threat from the abuse of paid search ads is disturbing. If abuse becomes too widespread, these ads could lose their effectiveness, especially amongst those who have a bad experience and in turn become more hesitant to click on a paid ad. Fighting this scourge should be a priority for Google (and any other search providers who provide paid ads).&lt;/p&gt;
&lt;p&gt;Additionally, I think it highlights that vigilance SEMs need to have in monitoring their own campaigns. With scammers already copying whole websites and &lt;a href="http://voices.washingtonpost.com/securityfix/2009/01/caveat_emptor.html"&gt;setting up phantom stores&lt;/a&gt; to steal from people, I can't help but think that a similar technique might eventually be employed with these AdWords scams.&lt;/p&gt;
&lt;p&gt;It's a dangerous online world out there.&lt;/p&gt;</body-formatted>
  <body-unformatted>&lt;p&gt;According to InternetNews, &lt;a href="http://www.internetnews.com/search/article.php/3798021"&gt;scammers are purchasing legitimate-looking AdWords campaigns&lt;/a&gt; and using them to redirect searchers who click on those ads to malicious websites. Some contain viruses and trojans that have been designed to avoid detection by anti-virus programs. Some of these malicious websites even employ '&lt;em&gt;scareware&lt;/em&gt;' to trick victims into believing that they're providing anti-virus software.&lt;/p&gt;
&lt;p&gt;One might think that this type of abuse of AdWords would be easy for Google to thwart but that appears not to be the case.&lt;/p&gt;
&lt;p&gt;According to Ryan Sherstobitoff of anti-virus vendor Panda Software, "&lt;em&gt;If you do a Google search using the term free antivirus 2009, all the sponsored 
links point back towards scareware. Now, instead of stealing your banking information, these spammers infect your PC 
and make you pay for the fake anti-malware immediately.&lt;/em&gt;"&lt;/p&gt;
&lt;p&gt;Making matters worse, traffic management applications are used to help scammers avoid detection. When someone clicks on a scammer's AdWords ad, for instance, sometimes they'll be redirected to a legitimate website. Thus, even if Google receives a complaint, it might not immediately be able to confirm the complaint.&lt;/p&gt;
&lt;p&gt;While the sophistication and ingenuity of online scammers isn't surprising, the threat from the abuse of paid search ads is disturbing. If abuse becomes too widespread, these ads could lose their effectiveness, especially amongst those who have a bad experience and in turn become more hesitant to click on a paid ad. Fighting this scourge should be a priority for Google (and any other search providers who provide paid ads).&lt;/p&gt;
&lt;p&gt;Additionally, I think it highlights that vigilance SEMs need to have in monitoring their own campaigns. With scammers already copying whole websites and &lt;a href="http://voices.washingtonpost.com/securityfix/2009/01/caveat_emptor.html"&gt;setting up phantom stores&lt;/a&gt; to steal from people, I can't help but think that a similar technique might eventually be employed with these AdWords scams.&lt;/p&gt;
&lt;p&gt;It's a dangerous online world out there.&lt;/p&gt;</body-unformatted>
  <created-at type="datetime">2009-01-23T15:36:54+00:00</created-at>
  <enabled-blog-comments-count type="integer">4</enabled-blog-comments-count>
  <expertise-level-id type="integer">1</expertise-level-id>
  <extract-format>html</extract-format>
  <extract-formatted>&lt;p&gt;&lt;strong&gt;Given how lucrative online crime can be, it probably isn't surprising that internet scammers continue to develop clever new ways of finding new victims.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;One of the latest: Google AdWords.&lt;/p&gt;</extract-formatted>
  <extract-unformatted>&lt;p&gt;&lt;strong&gt;Given how lucrative online crime can be, it probably isn't surprising that internet scammers continue to develop clever new ways of finding new victims.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;One of the latest: Google AdWords.&lt;/p&gt;</extract-unformatted>
  <featured type="boolean">false</featured>
  <id type="integer">3181</id>
  <learn-more-formatted>&lt;p&gt;For more information about paid search marketing, read our &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/paid-search-marketing-ppc-best-practice-guide"&gt;PPC Best Practice Guide&lt;/a&gt;&lt;/strong&gt;, and our separate buyer's guides for &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/paid-search-agencies-buyers-guide"&gt;Paid Search Agencies&lt;/a&gt;&lt;/strong&gt; and for &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/ppc-bid-management-technology-buyers-guide"&gt;PPC Bid Management Technology&lt;/a&gt;&lt;/strong&gt;.&lt;/p&gt;</learn-more-formatted>
  <learn-more-unformatted>&lt;p&gt;For more information about paid search marketing, read our &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/paid-search-marketing-ppc-best-practice-guide"&gt;PPC Best Practice Guide&lt;/a&gt;&lt;/strong&gt;, and our separate buyer's guides for &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/paid-search-agencies-buyers-guide"&gt;Paid Search Agencies&lt;/a&gt;&lt;/strong&gt; and for &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/ppc-bid-management-technology-buyers-guide"&gt;PPC Bid Management Technology&lt;/a&gt;&lt;/strong&gt;.&lt;/p&gt;</learn-more-unformatted>
  <legacy-article-id type="integer" nil="true"></legacy-article-id>
  <name>Google AdWords used to distribute malware</name>
  <private type="boolean">false</private>
  <published-at type="datetime">2009-01-23T15:46:41+00:00</published-at>
  <slug>google-adwords-used-to-distribute-malware</slug>
  <tweetbacks-updated-at type="datetime">2009-04-28T23:21:44+01:00</tweetbacks-updated-at>
  <unpublished-at type="datetime" nil="true"></unpublished-at>
  <updated-at type="datetime">2009-10-13T09:58:32+01:00</updated-at>
  <views-count type="integer">1258</views-count>
</blog-post>
