Phishing using Google Adwords / Adsense

Today while searching for a UK Bank Google offered me an advert.

The advert looks very unclear and I expect most “normal” people searching will click on it thinking it is the genuine website.

metrobank phishing mbinternetaccountant org.png
Note: The top “Ad” entry is the phishing link!

So… is Google dumb enough to allow this? It seems so!

You click on it.. spot the difference.

metrobank phishing mbinternetaccountant org fake site
vs
metrobank genuine site

Google are allowing a phishing site to advertise on keywords for a UK bank!

To make identification of this site more difficult it seems that if you visit the site without Google as the referer you get either a 404.. or a website that looks like it is for an accountancy practice.

metrobank phishing mbinternetaccountant org with no google referer

Poor show.. time to report the advert to Google.

However it looks like it isn’t the first time. I can find similar names that have likely had the same scam

hsbcsaving.info – HSBC Bank phishing site
tsbinternet.info – UK Bank; TSB phishing site
tsbinternetsavings.org – UK Bank; TSB phishing site
tsbinternetaccounts.org – UK Bank; TSB phishing site
cbonline.live – Clydesdale Bank phishing site
cbonllne.group – Clydesdale Bank phishing site
cbonlive.group – Clydesdale Bank phishing site
cbonline.online – Clydesdale Bank phishing site
clydesdaleco.xyz – Clydesdale Bank phishing site
cbinternetacc.site – Clydesdale Bank phishing site
cbinternetaccountants.xyz – Clydesdale Bank phishing site
cbonlineaccount.info – Clydesdale Bank phishing site
cbolines.online – Clydesdale Bank phishing site
chasesavingsacc.com – US bank “Chase” phishing site

cbonlinesaver.info – Clydesdale Bank phishing site
cbonlinesaveracc.info – Clydesdale Bank phishing site
cbinternetacc.xyz – Clydesdale Bank phishing site
ntwestm.info – UK Bank NatWest phishing site
personalnatwst.info – UK Bank NatWest phishing site

ylbonline.ltd – Yorkshire Bank phishing site
ybonlline.com – Yorkshire Bank phishing site
ybonlinesavings.xyz – Yorkshire Bank phishing site
ybonllne.systems – Yorkshire Bank phishing site
ylbonline.systems – Yorkshire Bank phishing site
yrkbonline.xyz – Unknown
ysbonline.info – Unknown
ysbonline.info – Unknown
mbinternetaccountant.org – Metro Bank phishing site
mbinternetaccountants.org – Metro Bank phishing site
mbonlinesavings.info – Metro Bank phishing site
mbinternetsaver.com – Metro Bank phishing site
mbinternetaccs.info – Metro Bank phishing site
metrobankinternt.info – Metro Bank phishing site
metrobankinternet.com – Metro Bank phishing site
mbinternetsavings.com – Metro Bank phishing site
mbsavingsacc.info – Metro Bank phishing site
mbonlinehome.info – Metro Bank phishing site
mbinternetsaving.com – Metro Bank phishing site
mbinternt.info – Metro Bank phishing site
mbiinternet.org – Metro Bank phishing site
mbinternetaccount.xyz – Metro Bank phishing site
mtrbonline.info – Metro Bank phishing site
metrbonline.info – Metro Bank phishing site

rbspersonal.xyz – Royal Bank of Scotland phishing site
postoffc.com – UK Bank Post Office phishing site
pstofficeacc.xyz – UK Bank Post Office phishing site
pstoffcsavingsacc.info – UK Bank Post Office phishing site

Most are hosted at “45.76.210.134” (45.76.210.134.vultr.com).

Advertisement
This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s