Cyber Security News & Tips by Glenda R. Snodgrass for The Net Effect
[ View this email in your web browser ] [ Visit our archives ] [ Sign Up for this Newsletter ]

January 24, 2023

Good morning, everyone!

This week’s critical vulnerabilities:
  • Cisco has released security patches for its Unified Communications Manager Session Management Edition (Unified CM SME)
  • Oracle has just released an amazing 327 security patches

Patch All the Things!

Google Ads feature fake websites, used to deliver malware

I know we've talked before about the importance of consulting original sources of information. This week's news reinforces this advice.

Several security researchers have reported a rapid increase, in recent weeks, in the number of Google Ads pointing to fake sites hosting malware. I've read several reports of as many as five Google Ads showing up above an organic search result, where every single one of them was pointing to a fake website.

Especially prevalent right now, cyber criminals are hosting infected versions of popular free and open-source software, including tools like VLC, 7-Zip, CCleaner, Audacity, OBS, NotePad++ and more, hosting them on websites and paying for Google Ads to push them. It's happening even to tech-savvy people (when they aren't careful):

Over the weekend, crypto influencer Alex, better known by their online persona NFT God, was hacked after launching a fake executable for the Open Broadcaster Software (OBS) video recording and live streaming software they had downloaded from a Google ad in search results.

And, hey, it's not just Google Ads, right? Cyber criminals routinely attack engines that serve advertisements to multiple online sites. This advice goes for ANY online advertisement.

How do you protect yourself?

(1) Check the URL of any website before clicking on a link. On a desktop computer, hover your mouse over the link. On a mobile device, press and hold the link. In both cases, the true destination of that link will show up in a popup, so you can see where that link will really take you. If the domain name doesn't look familiar, or anything looks suspicious, look for another way (an original source!) to get what you need.

(2) Download only from known, safe sites. If you routinely use a free software package, bookmark the developer's website so you can get updates with confidence. Sign up for his/her newsletter to get notified of updates and clean links to download.

(3) Consider using an ad blocker. I'm not a huge fan of ad blockers for work computers, because they do block legitimate functions pretty regularly, but for home computers, yes, definitely, using an ad blocker can protect against malicious downloads, especially when less-than-savvy users are surfing the web for fun.

Stay safe online this (and every) week!

Remember, you can read past editions of this newsletter on our website, along with tons more information under the Resources tab.

Have a great week!

Glenda R. Snodgrass

Glenda R. Snodgrass
(251) 433-0196 x107
For information security news & tips, follow me!

Security Awareness Training Available Here, There, Everywhere!

Thanks to COVID-19, lots of things went virtual, including my employee Security Awareness Training. Live training made a comeback a few months ago, but many organizations are retreating. No worries. Wherever you and your employees may be, I can deliver an interesting and informative training session in whatever format you prefer.

Contact me to schedule your employee training sessions. They're fun! ☺

TNE. Cybersecurity. Possible.

Speak with an Expert


The Net Effect, L.L.C.
Post Office Box 885
Mobile, Alabama 36601-0885 (US)
phone: (251) 433-0196
fax: (251) 433-5371
email: sales at theneteffect dot com
Secure Payment Center

The Net Effect, LLC

Copyright 1996-2024 The Net Effect, L.L.C. All rights reserved. Read our privacy policy