ThreatPaper
Verified

The fraudulent advertisements ran on Google and Bing

Assessment

The December 2025 release, citing the seizure affidavit, states the group "delivered fraudulent advertisements through search engines, including Google and Bing," imitating banks' own sponsored results. The indictment itself names neither platform, referring only to "sponsored links on search engines." Neither company has commented and no allegation is made against either. How the advertisements passed platform review is not described beyond the co-conspirator's alleged purchase of "website traffic filtering tools," the usual method of showing reviewers a benign page.

Where this claim appeared

US Department of Justice · 2025-12-22

https://www.justice.gov/opa/pr/justice-department-announces-seizure-stolen-password-database-used-bank-account-takeover

What “Verified” means

Established by primary sources — the original disclosure, a vendor incident report, a court filing, a government advisory, or the affected party itself. Where a claim is material, at least two independent sources agree.

5 of 5 · rating scale

Assessed in

Sponsored-Link Bank Phishing: How a Google Ad Above the Real Login Took $14.6 Million

Think this assessment is wrong? Report an error.