Google-hosted malvertising leads to fake Keepass site that looks genuine

Re:Google-hosted malvertising leads to fake Keepass site tha... by baal80spam on Thursday October 19, 2023 @03:46AM (#37939744)

I consider myself a security-conscious person and I'm not sure I would've spotted this. Another reason to use uBo with zero regrets.

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by sschueller on Thursday October 19, 2023 @04:22AM (#37940031)

What is uBo?

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by andybak on Thursday October 19, 2023 @04:32AM (#37940109)

Someone saving themselves 3 keypresses, approximately 1.5 seconds effort and causing a flurry of unneccesary replies.

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by s3p on Thursday October 19, 2023 @10:21AM (#37943298)

"uBo" "uBlock Origin"

How is that a difference of 3 keys?

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by lcnPylGDnU4H9OF on Thursday October 19, 2023 @02:21PM (#37946541)

> Someone saving themselves [a trivial amount of] effort and causing a flurry of unneccesary replies.

I don't get the impression that their point is much changed by it being 3 keys instead of... 11 by my count (10 if you don't count shift for the capital O).

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by Semaphor on Thursday October 19, 2023 @04:23AM (#37940045)

uBlock Origin, the best adblocker, and only full-featured on FF (but still better than the rest on the adtech browser):

https://github.com/gorhill/uBlock

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by lfglopes on Thursday October 19, 2023 @04:24AM (#37940049)

https://github.com/gorhill/uBlock#readme

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by bovem on Thursday October 19, 2023 @04:24AM (#37940050)

uBlock Origin: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin...

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by Nextgrid on Thursday October 19, 2023 @04:24AM (#37940048)

uBlock Origin, the gold standard when it comes to ad and tracker blocking.

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by taspeotis on Thursday October 19, 2023 @05:49AM (#37940634)

Haven't seen it mentioned yet: uBlock Origin.

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by worble on Thursday October 19, 2023 @05:30AM (#37940507)

When I saw the screenshot the only thing I thought was "damn I should clean that dirt off my monitor". If I didn't have uBo I'd 100% fall for that.

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by fuzzy2 on Thursday October 19, 2023 @05:58AM (#37940697)

uBlock Origin is cool and all, but what does it have to do with IDN lookalike attacks? It certainly did not block this one for me.

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by infinityio on Thursday October 19, 2023 @06:05AM (#37940731)

the distribution method for this particular attack was a Google search ad

[ Parent | on HN ]

Re:Google-hosted malvertising leads to fake Keepass site tha... by s3p on Thursday October 19, 2023 @10:20AM (#37943290)

It blocks redirects from Google ads so you would never have been able to load the website in the first place

[ Parent | on HN ]