If reports are to be believed, there has been a recent uptick in the number of online scams propagated through Google Alerts.
According to anecdotal evidence laid out by Bleeping Computer, the content notification service is increasingly being abused by malicious users to distribute malware.
The publication asserts the service has now been overrun by malicious users and backed up its claims by gesturing to a recent Google Alerts report made up almost exclusively of malicious links.
- We’ve rounded up the best ransomware protection tools
- These are some of the best endpoint protection software
- Check our list of the best firewall apps and services
Malicious alerts
More worryingly, BleepingComputer further claims that configuring the service to display only the best results won’t prevent the scam results from sneaking into alerts.
When clicked, most malicious URLs are said to redirect users to a website that contains links to fake apps and browser extensions riddled with malware or trick users with giveaways and sweepstake scams.
The links manage to make their way into Google Alerts through a notorious search engine optimization (SEO) technique known as cloaking. In simple terms, the technique works by displaying legitimate content search engine spiders, while showing something else to visitors.
BleepingComputer illustrates this by opening up one of the malicious pages delivered via Google Alerts. When opened directly, the page displays lots of text loaded with keywords to help it makes its way into alerts.
However, when the URL to the page is clicked via Google Alert, it’ll redirect users to a malicious website.
Google did not respond immediately to our request for comment.
- Here’s our list of the best disaster recovery services
Via BleepingComputer
