Mac malware that steals passwords, cryptocurrency wallets, and other sensitive data has been spotted circulating through Google ads, making it at least the second time in as many months the widely used ad platform has been abused to infect web surfers.

Like most other large advertising networks, Google Ads regularly serves malicious content that isn’t taken down until third parties have notified the company. Google Ads takes no responsibility for any damage that may result from these oversights. The company said in an email it removes malicious ads once it learns of them and suspends the advertiser and has done so in this case.

People who want to install software advertised online should seek out the official download site rather than relying on the site linked in the ad. They should also be wary of any instructions that direct Mac users to install apps through the right-click method mentioned earlier. The Malwarebytes post provides indicators of compromise people can use to determine if they’ve been targeted.

  • @adarza@lemmy.ca
    link
    fedilink
    English
    314 months ago

    all the more reason to use an adblocker… and a script blocker if you don’t mind the extra clicks to get a whitelist going or to temporarily allow them somewhere.

    • @ShittyBeatlesFCPres@lemmy.world
      link
      fedilink
      English
      64 months ago

      Are there shared whitelists? It seems like something that isn’t really practical without them. I’m a web developer who has never served one ad but the front-end tools now basically export all JavaScript. You’d probably just get a blank page on any site made recently that’s more complex than a portfolio/resume page.

      • @towerful@programming.dev
        link
        fedilink
        English
        24 months ago

        Larger sites cater towards scriptless web for accessibility requirements.
        Smaller sites don’t need SPA, so will most likely work to some degree.
        The better (not necessarily bigger) blog systems will use scripting for fancy things, but will have fallbacks and will still work.

        It’s the middle tier web-app (and sites that want to be a web app but have no reason to be) that will run SPA without any fallback. You know, the ones that want to send notifications and know your location and all that fun stuff.

        • @TrickDacy@lemmy.world
          link
          fedilink
          English
          44 months ago

          The person you’re explaining websites to is a web developer and they are correct. There being a ton of websites needlessly dependent on JavaScript is well known and long lived.

  • teft
    link
    fedilink
    English
    694 months ago

    Google Ads takes no responsibility for any damage that may result from these oversights.

    I’m not a lawyer but that doesn’t seem likely to hold up in court.

    • @beepaboopa@lemmy.world
      link
      fedilink
      English
      334 months ago

      Yeah… Just because you say you’d prefer to not take responsibility doesn’t absoluve you from responsibility.

      Unless it does, in which case I will begin committing crimes and saying that constantly.

      • @HogsTooth@lemmy.world
        link
        fedilink
        English
        74 months ago

        On a bigger scale, I think it’s all wasted money. Maybe its the autism, but the more I see a company name, any company name, the less I want it in my house.

        • @pyre@lemmy.world
          link
          fedilink
          English
          04 months ago

          if you think it doesn’t work on you, it’s more likely to work on you. if it didn’t work the world would be a much better place, but unfortunately they definitely work.

          but i agree it’s stupid especially as a business model and it shouldn’t exist.

        • @TrickDacy@lemmy.world
          link
          fedilink
          English
          3
          edit-2
          4 months ago

          The data is very clear… Ads work. They absolutely shouldn’t almost ever, but they do. With the cornucopia of analytics available, companies have long been able to see if their ads work, and if they didn’t, they would’ve stopped long ago. Hell even before the Internet they had ways to prove ads work.

          edit: gotta say it’s pretty sad that so many simpletons downvoted this. Ya know, ads working is something that I hate. I hate ads. I want them all to go away. I’m simply stating a well known fact: they absolutely work, even on people like you and I who do our best to block and ignore them.

          You’re pretty fragile if that fact upsets you enough to shoot the messenger.

          • @HogsTooth@lemmy.world
            link
            fedilink
            English
            04 months ago

            Then stop beating the “it’s all hopeless” drum. You’re certainly not going to change my mind.

            • @TrickDacy@lemmy.world
              link
              fedilink
              English
              04 months ago

              Uh I didn’t…

              Ads work. It’s a fact. Just because it’s a sad fact doesn’t mean I want you to be sad.

  • @demonsword@lemmy.world
    link
    fedilink
    English
    184 months ago

    Google Ads takes no responsibility for any damage that may result from these oversights

    …and there it is, the root of the problem. If this kind of thing did any damage to Google’s bottom line, I doubt it would happen frequently

  • @kennebel@lemmy.world
    link
    fedilink
    English
    24 months ago

    (Hyperbole) I’m shocked! I have been informed for decades, usually at high levels of snootiness, that Macs don’t have viruses unlike those pathetic other operating systems…

    (hahaha)

  • 555
    link
    fedilink
    English
    34 months ago

    Good thing Google ads are blocked on my Mac lol.