Google Search Ad Leading to a Trezor Suite Phishing Website

[Zwei]

there is currently a sponsored google search ad that is a trezor suite phishing website, and it's hosted on google sites.



phishing website (do not open):

Code:

https://sites.google.com/view/start-trezor-suite

i came across this on twitter, and the guy who posted about it looks to have lost all his coins after falling for it: https://x.com/ReallyBadDay99/status/2085454877719675354

google is such a clown company, like how is it even possible for them not to be able to detected a phishing website with all their resources and AI shit.
not only are they taking money for the ad, it's hosted on their own servers.

if you are not using an adblock, start using one like right now, at least that will help save you from phishing ads.

[Charles-Tim]

I think we should also blame this companies for not sueing Google for collecting money without verifying if it is legit or not. Trezor is a big name that they should know other related sites are just for scam purposes. Shame on Google the most. The government left this unhandled for years now and still scammers are making use of it and paying to Google. What is the work of the government if they can not tackle this. There actions work have made Google do something about it.

[Zwei]

I think we should also blame this companies for not sueing Google for collecting money without verifying if it is legit or not. Trezor is a big name that they should know other related sites are just for scam purposes. Shame on Google the most. The government left this unhandled for years now and still scammers are making use of it and paying to Google. What is the work of the government if they can not tackle this. There actions work have made Google do something about it.

they should definitely get sued by both the companies and the victims, and not only google, facebook, twitter, microsoft too, they all should get sued.

just this phishing ad alone looks to have been active for 2 days, and they have stolen 24BTC with it so far: https://mempool.space/address/bc1qrz33mr7tx8wrpcs2pxrvv83hqwpm907s9shkz4

[The Cryptovator]

google is such a clown company, like how is it even possible for them not to be able to detected a phishing website with all their resources and AI shit.
not only are they taking money for the ad, it's hosted on their own servers.

if you are not using an adblock, start using one like right now, at least that will help save you from phishing ads.

Google really doesn't care about this type of scam, because we have been hearing sometimes how investors lose money from the Google ads where fake links have been used. Their AI seems not to have been trained well to prevent such scams. They might be down later if the site reported. We shouldn’t trust any Google ads, because these ads are placed by money, and Google just cares about their revenue.

That’s why I manually type web addresses when it’s something related to money. Even when using Google Search, always try to verify if the link is real. Don't just blindly click and move forward; otherwise, we would have a bad experience. Also, I often try to find the links from the forum, such as wallet addresses and so on. But I make sure to link posts by highly reputable forum members. Otherwise, we may encounter phishing attacks.

[Bitcoin_Arena]

google is such a clown company, like how is it even possible for them not to be able to detected a phishing website with all their resources and AI shit.
not only are they taking money for the ad, it's hosted on their own servers.

if you are not using an adblock, start using one like right now, at least that will help save you from phishing ads.

I have been using uBlock Origin for ages, and such phishing sites were history until Google Chrome decided to fight adblockers with their new policies of Chrome extensions. It all seems like Google is just trying to fight for the scammers. All they care about is their ad revenue  

[$crypto$]

Try searching on the Google engine and find phishing sites again even though not in the First Order, still Google let him without any action to remove.

Code:

https://sites.google.com/walletcryptohub.com/trezorsuite/home

Google really doesn't care about this type of scam, because we have been hearing sometimes how investors lose money from the Google ads where fake links have been used. Their AI seems not to have been trained well to prevent such scams. They might be down later if the site reported. We shouldn’t trust any Google ads, because these ads are placed by money, and Google just cares about their revenue.

Google has not acted on this type of phishing scam, they just let it go, which means there are no strict checks, right?.
Now we report it and some Google will remove it, a few weeks later phishing ads will appear again and so on.

[RGBTC]

I have been using uBlock Origin for ages, and such phishing sites were history until Google Chrome decided to fight adblockers with their new policies of Chrome extensions. It all seems like Google is just trying to fight for the scammers. All they care about is their ad revenue  

I am not sure if DNS settings can affect search results, but when I tried searching for well-known brands like Ledger, Binance, Facebook, Revolut, Electrum, and many others, there wasn't a single ad on the first page of the search results. I am simply using a somewhat outdated chrome version (150.xxx.xx) on my Android device and no adblocker addon were installed.

[owlcatz]

Try searching on the Google engine and find phishing sites again even though not in the First Order, still Google let him without any action to remove.

Code:

~snip~

Google has not acted on this type of phishing scam, they just let it go, which means there are no strict checks, right?.
Now we report it and some Google will remove it, a few weeks later phishing ads will appear again and so on.

Can y'all maybe stop quoting/reposting the actual scam link at least?   Use your heads people...

[hugeblack]

I just hope such paid ads aren't added as part of AI app/service recommendations because they're far more trustworthy than the first Google search result.
Unfortunately, this scam has been going on for years and Google hasn't taken any action to stop it.

[Amphenomenon]

I just hope such paid ads aren't added as part of AI app/service recommendations because they're far more trustworthy than the first Google search result.

This might probably had happened and even if it isn't this but maybe other phishing scam.

Unfortunately, this scam has been going on for years and Google hasn't taken any action to stop it.

It's actually unfortunate and annoying giving much consideration to it. Trezor is nothing new and the fact that they could not see this is literally ironic, imagine how many unknown or unpopular platforms, wallets or services that exist and have a scam replication on Google and other big platforms.

[BALIK]

if you are not using an adblock, start using one like right now, at least that will help save you from phishing ads.

We always say that software, whether it's Bitcoin related or anything else, should only be downloaded from official website. Yet I still don't understand why people ignore such basic security rule.

With Trezor, I always verify the installer with GPG signature in Kleopatra to make sure the software is authentic. Ad blocker are definitely a useful extra layer, and it is also a good idea to bookmark the official URL, imo.

If you are too lazy to spend few minute verifying GPG signature, how are you supposed to survive in today's scam infested world! Really sad to see.

[PrivacyG]

Scrolling down on that page you see this disclaimer which I find ironic,

Disclaimer: This content is provided for informational and educational purposes only and does not represent official guidance from Trezor Suite or its developers. We do not offer financial, investment, or security advice. Always verify information through official Trezor Suite sources before making cryptocurrency or wallet-related decisions.

-----

they should definitely get sued by both the companies and the victims, and not only google, facebook, twitter, microsoft too, they all should get sued.

I agree.  They have advertised all these scams for many years with no consequence at all and no action to prevent more such scams.  They only take down one for three more to come out.  Trezor is a key word when it comes to Cryptocurrencies.  How are they allowed to use that key word with no separate, extra verification before publishing the advertisement?

I suppose we all know the answer to that question.

[acroman08]

phishing website (do not open):
-snip

Nice catch! It looks like the website has been removed/shutdown(not sure when it was shut down). I get "404. That’s an error. The requested URL was not found on this server" when I visit the website(Got curious about PrivacyG's post, so I tried to check it out).

they should definitely get sued by both the companies and the victims, and not only google, facebook, twitter, microsoft too, they all should get sued.

just this phishing ad alone looks to have been active for 2 days, and they have stolen 24BTC with it so far: https://mempool.space/address/bc1qrz33mr7tx8wrpcs2pxrvv83hqwpm907s9shkz4

I agree with this. If I remember correctly, Google specifically has been sued for similar things and has been ordered to pay compensation to people that was affected by scams that were shown as "sponsored ads", so they could probably get something if they sued Google.