Researchers have uncovered a sophisticated tech support scam being delivered through Google ads, which freeze the screens of both Windows and Mac devices. These ads display urgent messages instructing users to call a bogus call center. The malicious ads were found on various high-traffic websites, including maps, weather, real estate, document hosting, and sports sites. Users who called the provided number were pressured to pay hefty fees, grant remote access to their devices, or disclose personal information. Between August 31 and September 14, security firm Netskope tracked clicks on these ads from users in 619 customer organizations, although none were actually scammed due to Netskope’s blocking measures.
Approximately 62 percent of the organizations affected were based in the United States, with Japan and Australia following as the second and third most impacted countries. Given that Netskope only has visibility into a small portion of internet activity, the actual number of individuals exposed to these ads—and those who may have fallen victim—is likely much higher. The firm identified over 250 Google Ads campaign IDs across at least 284 legitimate publisher sites.
Understanding the Scam
Netskope explained that the scam employs a technique that transforms a simple ad click into a browser that appears to freeze due to a fake security warning. This “locker” fills the screen, hides the cursor, and disables the usual exit keys, creating a convincing illusion of a malfunctioning device. While nothing on the computer is actually locked, the scenario is designed to pressure users into calling the displayed number.
Critics often ridicule those who fall for such scams, but this perspective overlooks a significant number of internet users who may lack a basic understanding of technology. The urgency to resolve issues quickly, combined with the increasing complexity of navigating the web, makes many users vulnerable to these scams. It is likely that some of those who criticize victims may have friends or family members who are similarly unaware of the risks.
For more details, see the full report by Ars Technica.
Follow Cyber Warriors Middle East for further global cybersecurity developments.
