Slashdot Mirror
Microsoft Says It Has Resolved an Issue With Bing Which Was Causing It To Push Malware When Users Searched for Chrome (howtogeek.com)
Chris Hoffman, writing for How To Geek: You launch Edge on your new PC, search for "download Chrome," and click the first result headed to "google.com" on Bing. You're now on a phishing website pushing malware, disguised to look like the Chrome download page. That's the story Gabriel Landau tells on Twitter. We were able to reproduce this problem, although it doesn't happen every time. Usually, you'll end up seeing an ad for "https://www.google.com". That goes to the real Chrome download page, and everything is fine. But, sometimes, you'll see an ad for "google.com". Guess what -- that doesn't actually go to Google.com. This ad was created by a scammer and goes elsewhere. Microsoft is apparently not verifying the web address the advertisement actually goes to. Bing is letting this advertisement to lie to people. Microsoft says it has resolved the issue.
Now if they would FIRST fix the issue where it gives you chrome while searching for malware.
Reading the title, my first thought was "fix the issue.. sure!". But it's actually not unlikely that Bing, being much less involved in Chrome than Google..., might render search results not in a way the user expects. Morale of the story: don't always click the first result - or at least check it!
Slashdot, fix the reply notifications... You won't get away with it...
As the best web browser to use to download a better web browser.
Microsoft Says It Has Resolved an Issue With Bing Which Was Causing It To Push Malware When Users Searched for Chrome (emphasis added)
Glad to see MS finally admitting the true nature of Edge.
You know, after all, that the first step on the road to recovery is admitting you have a problem.
Sure Microsoft is in competition with Google for both its Search Engine and its browser. But having Bing go to a Malware site, which infects your Windows PC. Makes Windows, Edge, and Bing all look bad, as well as Microsoft for trying to be underhanded.
With all the attention to prevent Google Chrome from taking more Edge share away I would expect Bings relationship with searching for a Google Product should be tightly controlled and managed, and mostly in a way to insure fairness and get good sets of data. I would expect the #1 result would be from Microsoft Telling you why Edge is So much better then chrome. But as #2 it should be googles download.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
(facepalm)
File under 'M' for 'Manic ranting'
With all the crap it sends back to Google, Chrome almost qualifies as malware.
---
DRM is like antifreeze, to the MPAA/RIAA it's sweet, to the consumers it's poison.
#badtransitiveverbs
(facepalm)
...or maybe it's just bad punctuation: "Bing is letting this advertisement lie, people!
... is downloading Chrome. Oh, wait...
Makes sense.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
I wonder what actually allows the ad to claim to be www.google.com? Does Google have an open redirect URL somewhere? Is not specifying the final host a legitimate usage for an ad?
Visiting slashdot.org on my phone resulted in Chrome blocking 7 popups. One got through when I clicked on the story. Companies simply don't police their ads. It is shameful.
It's 2018. This crap has been going on for almost 8 years now. And it's not just Bing. Just about every search engine with ads has or has had this problem.
If it's a popular app, and your search engine has ads. Guaranteed there's a Virus Inc. buying adwords for it.
1) If someone is buying Adwords for any app, and it's NOT the company or group that maintains the software, ban it.
2) If you can't verify #1, don't allow it until you can.
3) It if sounds or feels shady in any way, don't allow it.
4) If it's going to a aggregate site not directly affiliated to the company, ban it.
5) If ANYONE auto redirects from the Adword link in any way. Legit or not. even after a minute. ban it.
6) Every dropper malware I see only drops a payload once. If you see one drop. Ban it. In fact ban every ad with that domain for at least a month or more. Preferably for life.
7) Since you're monitoring every click anyway, browse the link when it's clicked every time and make sure they are getting a clean page. If at any time, you're being redirected because it sees the traffic coming from you or the script is actually stupid enough to drop malware to your IP, ban it.
8) Better yet, enforce and serve the complete ad site yourself and pull it cloudflare style. Check any links or files clicked or downloaded from the site. Guaranteed your IP's / crawlers are blacklisted so that a malware payload won't drop if you pull it. Best case is that it never drops a payload cause you're pulling it and sending it to the user. Worse case is it drops malware on your pull request, at that point, show the user the "Site has a problem" page and ban it.
In Soviet Russia, Trojan exploits YOU!
Microsoft wants to kill Chrome just as much as Netscape, I woudnkt be surprised if some of Bing’s employees were in on the scam, in order to bypass security checks for ads.
So this means that scammers can just pay Microsoft to put their scam and viruses in their search results? So anybody using Bing can just stop using it right now and forever because this is just unacceptable.
Competition is such a strong word to describe this "relationship". Perhaps, bing flounders uselessly before Google search? I mean bing isn't even worthy of being typed with a capitol letter, the very word is beneath other proper nouns. If bing where a hard drive, you would have to put the jumper on the drive to configure it in slav......., sorry in post 2018 vanacular, secondary mode! Dodged a bullet their, was gunna have Duckduckgo pissed at me. Tho Altavista wouldn't have minded.
The just facilitated a link to the REAL virus.
Maybe now Google can fix its problem with ad results for fake tech support scams when you type in [literally anything] + "support"