{"id":652060,"date":"2025-02-03T21:20:21","date_gmt":"2025-02-03T18:20:21","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/phishing-scam-targets-microsoft-ad-accounts-via-google-search\/"},"modified":"2025-02-03T21:20:21","modified_gmt":"2025-02-03T18:20:21","slug":"phishing-scam-targets-microsoft-ad-accounts-via-google-search","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/phishing-scam-targets-microsoft-ad-accounts-via-google-search\/","title":{"rendered":"#Phishing scam targets Microsoft Ad accounts via Google Search"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_84 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a24c13493c9b\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a24c13493c9b\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/phishing-scam-targets-microsoft-ad-accounts-via-google-search\/#Cybercriminals_are_exploiting_Google_Search_ads_to_create_sophisticated_phishing_traps_that_steal_Microsoft_advertising_account_credentials\" >Cybercriminals are exploiting Google Search ads to create sophisticated phishing traps that steal Microsoft advertising account credentials.<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"subhead\" itemprop=\"alternativeHeadline\"><span class=\"ez-toc-section\" id=\"Cybercriminals_are_exploiting_Google_Search_ads_to_create_sophisticated_phishing_traps_that_steal_Microsoft_advertising_account_credentials\"><\/span>Cybercriminals are exploiting Google Search ads to create sophisticated phishing traps that steal Microsoft advertising account credentials.<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><\/p>\n<div class=\"bialty-container\">\n<p>Cybercriminals are exploiting Google Search ads to steal Microsoft advertising account credentials, revealing a sophisticated phishing scheme that has potentially been active for years.<\/p>\n<p><strong>The big picture.<\/strong> Attackers created malicious Google ads mimicking Microsoft Advertising\u2019s official platform. The campaign redirects users through complex networks to steal login information. Researchers discovered potential infrastructure dating back multiple years<\/p>\n<p><strong>How it works.<\/strong> Hackers use a multi-step process to bypass security:<\/p>\n<ul class=\"wp-block-list\">\n<li>Create sponsored search results that look like legitimate Microsoft ads.<\/li>\n<li>Implement cloaking techniques to evade bot detection.<\/li>\n<li>Use Cloudflare verification to <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>ear more authentic.<\/li>\n<li>Present a convincing phishing page that mimics Microsoft\u2019s login screen.<\/li>\n<\/ul>\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" width=\"727\" height=\"341\" src=\"https:\/\/searchengineland.com\/wp-content\/seloads\/2025\/02\/image_d1e94e.webp\" alt=\"Image D1e94e\" class=\"wp-image-451453\" style=\"width:792px;height:auto\" srcset=\"https:\/\/searchengineland.com\/wp-content\/seloads\/2025\/02\/image_d1e94e.webp 727w, https:\/\/searchengineland.com\/wp-content\/seloads\/2025\/02\/image_d1e94e-600x281.webp 600w, https:\/\/searchengineland.com\/wp-content\/seloads\/2025\/02\/image_d1e94e-200x94.webp 200w\" sizes=\"(max-width: 727px) 100vw, 727px\"><\/figure>\n<\/div>\n<p><strong>Why we care.<\/strong> This threat is significant because it can compromise advertising accounts, potentially leading to financial losses, reputational damage, and disruption of critical marketing operations across digital platforms.<\/p>\n<p><strong>Protect yourself<\/strong><\/p>\n<ul class=\"wp-block-list\">\n<li>Verify URLs carefully before entering credentials.<\/li>\n<li>Use two-factor authentication wisely.<\/li>\n<li>Regularly monitor advertising accounts.<\/li>\n<li>Report suspicious ads.<\/li>\n<\/ul>\n<p><strong>What\u2019s next?<\/strong> Cybersecurity firms are investigating the broader implications of this <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2025\/01\/microsoft-advertisers-phished-via-malicious-google-ads\" target=\"_blank\" rel=\"noopener\">phishing infrastructure<\/a>, which appears to span multiple countries and platforms.<\/p>\n<p><strong>Bottom line.<\/strong> As online advertising becomes more complex, so do the techniques used by cybercriminals to exploit it.<\/p>\n<\/div>\n<p><\/p>\n<div class=\"about-author\">\n<p>About the author<\/p>\n<div class=\"information\">\n<div class=\"author-module\">\n<div class=\"row\">\n<div class=\"col-12 col-lg-3 text-center\">\n<div class=\"avatar\">\n\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" class=\"img-fluid rounded-circle avatar-border\" alt=\"Anu Adegbola\" width=\"140\" height=\"140\" src=\"https:\/\/searchengineland.com\/anu-adegbola-2\"><img loading=\"lazy\" decoding=\"async\" class=\"img-fluid rounded-circle avatar-border\" src=\"https:\/\/searchengineland.com\/anu-adegbola-2\" alt=\"Anu Adegbola\" width=\"140\" height=\"140\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n<\/p><\/div>\n<div class=\"col-12 col-lg-9\">\n<div class=\"about\">\n<div class=\"name\">\n\t\t\t\t\t\t\t<strong>Anu Adegbola<\/strong>\n\t\t\t\t\t\t<\/div>\n<div class=\"row g-2 pt-2\">\n<div class=\"col-auto twitter\">\n\t\t\t\t\t\t\t\t\t<a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/intent\/follow?original_referer=https%3A%2F%2Fsearchengineland.com%2F&amp;region=follow_link&amp;screen_name=TheMarketingAnu&amp;tw_p=followbutton&amp;variant=2.0\" rel=\"me\" target=\"_blank\" aria-label=\"opens in a new tab\"><i class=\"fab fa-x-twitter\"><\/i><\/a>\n\t\t\t\t\t\t\t<\/div>\n<div class=\"col-auto\">\n\t\t\t\t\t\t\t\t\t<a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/in\/themarketinganu\/\" target=\"_blank\" aria-label=\"opens in a new tab\"><i class=\"fab fa-linkedin\"><\/i><\/a>\n\t\t\t\t\t\t\t\t<\/div>\n<\/p><\/div>\n<p>\t\t\t\t\t\t<span style=\"color: #212529; font-family: system-ui, -apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', 'Noto Sans', 'Liberation Sans', Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji'; font-size: 16px;\">Anu Adegbola has been Paid <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">Media<\/a> Editor of Search Engine Land<\/span><span style=\"color: #212529; font-family: system-ui, -apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', 'Noto Sans', 'Liberation Sans', Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji'; font-size: 16px;\"> since 2024. She covers<\/span><span style=\"color: #212529; font-family: system-ui, -apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', 'Noto Sans', 'Liberation Sans', Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji'; font-size: 16px;\"> paid search, paid social, retail media, video and more.<\/p>\n<p>In 2008, Anu&#8217;s career started with<\/span><span style=\"color: #212529; font-family: system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Noto Sans, Liberation Sans, Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;\"><span style=\"font-size: 16px;\">\u00a0delivering digital marketing campaigns (mostly but not exclusively Paid Search) by building strategies, maximising ROI, automating repetitive processes and bringing efficiency from every part of marketing departments through inspiring leadership both on agency, client and marketing tech side.<\/span><\/span><\/p>\n<div><span style=\"color: #212529; font-family: system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Noto Sans, Liberation Sans, Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;\"><span style=\"font-size: 16px;\">\u00a0<\/span><\/span><\/div>\n<div><span style=\"color: #212529; font-family: system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Noto Sans, Liberation Sans, Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;\"><span style=\"font-size: 16px;\">Outside editing Search Engine Land article she is the founder of PPC networking event &#8211; PPC Live and host of <\/span><\/span><span style=\"color: #212529; font-family: system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Noto Sans, Liberation Sans, Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;\"><span style=\"font-size: 16px;\">weekly podcast PPCChat Roundup.<\/span><\/span><\/div>\n<div><span style=\"color: #212529; font-family: system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Noto Sans, Liberation Sans, Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;\"><span style=\"font-size: 16px;\">\u00a0<\/span><\/span><\/div>\n<div><span style=\"color: #212529; font-family: system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Noto Sans, Liberation Sans, Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;\"><span style=\"font-size: 16px;\">She is also an international speaker with some of the stages she has presented on being SMX (US), SMX (Munich), Friends of Search (Amsterdam), brightonSEO, The Marketing Meetup, HeroConf (PPC Hero), SearchLove, BiddableWorld, SESLondon, PPC Chat Live, AdWorld Experience (Bologna) and more.<\/span><\/span><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/category\/technology\/\" target=\"_blank\" >Technology<\/a><\/span> category.<\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/searchengineland.com\/phishing-scam-microsoft-ad-accounts-google-search-451446\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybercriminals are exploiting Google Search ads to create sophisticated phishing traps that steal Microsoft advertising account credentials. Cybercriminals are exploiting Google Search ads to steal Microsoft advertising account credentials, revealing a sophisticated phishing scheme that has potentially been active for years. The big picture. Attackers created malicious Google ads mimicking Microsoft Advertising\u2019s official platform. The&#8230;<\/p>\n","protected":false},"author":1,"featured_media":652061,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/searchengineland.com\/wp-content\/seloads\/2024\/01\/Microsoft-Ads.jpg","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[153160,107942],"class_list":["post-652060","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-microsoft-advertising","tag-ppc"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/652060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=652060"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/652060\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/652061"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=652060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=652060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=652060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}