Bleeping Computer has received reports recently about a malicious Home Depot ad on Google search results sending users to tech support scams. While scams are common, this is slightly more dangerous as it is the top result when searching for Home Depot. At first glance it’s nearly impossible to tell that the ad is a fraud. Moving the cursor over top of the link even shows the legitimate Home Depot domain. Not every click will show the scam page but eventually users are led to a Windows Defender tech support scam website that opens the print dialog box and makes it hard for users to close the page. Furthermore, the link only redirects to the same IP address once in a 24-hour period and any other clicks after that will take users to Home Depot’s real landing page. If the victim allows remote access to tech support scammers, it can even lead to a takeover of a victim’s device.
Written by: Nataliia Zdrok, Threat Intelligence Analyst at Binary Defense Russia’s invasion of Ukraine increased