Fraudulent Google ads targeting US residents push victims toward calling centers for utility bill scams, with some ads using fake US-based entities. Researchers found mobile-focused campaigns from advertisers based in Pakistan and have reported advertiser accounts to Google and added related domains to blocklists. #FTC #Google #thedealprovider #metacobox #billtechsolutions #energybilling #energyproviderss #sharkcablesservices #expertenergyservice
Keypoints
- Fraudulent Google ads targeting US residents are used to push them toward phone-based utility bill scams.
- Campaigns appear to be mobile-focused and originate from advertisers based in Pakistan.
- Many ads do not link to a landing page; instead, they display a phone number to call.
- Some ads appear legitimate but harbor inconsistencies, such as a suspicious US address for the advertiser.
- The FTC provides consumer guidance on utility scams, though it focuses on scammers calling victims rather than the other way around.
- Researchers have reported the fraudulent advertiser accounts to Google and added related domains to their blocklists.
MITRE Techniques
- [T1566.003] Spearphishing via Service – The campaign uses Google ads to prompt victims to dial a number and contact scammers, effectively phishing via a third-party ad platform. “The ad will bring up the phone number and prompt you to dial.”
- [T1583.001] Acquire Infrastructure – Domains used by the scammers are often new, indicating rapid setup of malicious infrastructure. “the domains used belong to the scammers and are often fairly new.”
- [T1036] Masquerading – Some ads look legitimate and US-based, but checking details reveals inconsistencies like an apartment complex address. “some ads appear somewhat legitimate… an address that leads to an apartment complex.”
Indicators of Compromise
- [Domain] Advertiser domains – thedealprovider[.]com, metacobox[.]online, billtechsolutions[.]online, energybilling[.]solutions, sharkcablesservices[.]com, energyproviderss[.]com, energybillingdept[.]com, energybilling[.]today, expertenergyservice[.]com
- [Phone] Phone numbers – 888-615-9113, 800-347-7920, 800-350-1794, 888-326-7299, 888-825-9915, 888-614-3071, 888-849-1158, 800-347-7462, 800-642-6920
Read more: https://www.malwarebytes.com/blog/scams/2024/06/utility-scams-update