Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Beware: Malicious Home Depot Ad Gets Top Spot In Google Search

Beware: Malicious Home Depot Ad Gets Top Spot In Google Search

A malicious Home Depot advertising campaign is redirect Google search visitors to tech support scams.

Malicious Google search ads are nothing new, with campaigns for Amazon PrimePayPal, and eBay seen in the past. As these ads look like legitimate campaigns for the company, including showing their standard URL when you hover over them, it is common for people to be tricked into clicking on them.

Yesterday, BleepingComputer was notified by someone who fell for a malicious Home Depot advertisement currently displayed in the top spot of a Google search.

As a test, BleepingComputer searched for ‘home depot’ and was shown the malicious advertisement on our first try. Even worse, the ad is the top spot in the research result, making it more likely to be clicked.

As you can see below, the ad clearly states it’s for, and hovering over it shows the site’s legitimate destination URL.

Also Read: 15 Best Tools For Your Windows 10 Privacy Settings Setup

Home Depot ad in Google Search

However, when visitors click on the ad, they will be redirected through various ad services until eventually they are redirected to a tech support scam.

Redirects from Google ad search to tech support scam

Ultimately, the visitor will land at a page showing an incredibly annoying “Windows Defender – Security Warning’ tech support scam. This scam will repeatedly open the Print dialog box, as shown below, which prevents the visitor from easily closing the page.

Tech support scam shown by clicking on the Home Depot ad

To make it more difficult for security professionals to diagnose these ads, it appears that they only redirect to the scam once every 24 hours to the same IP address. Once a tech support scam is shown by clicking on the ad, subsequent clicks bring visitors to the legitimate site.

Unfortunately, many people, especially older people, who are not comfortable with computers, fall for these scams and call the number thinking it is a legitimate alert.

In some cases, the caller is tricked into allowing remote access to their computer where the scammers install programs like Lock My PC. The scammers then state that the caller must purchase a support package to unlock Windows.

Also Read: Going Beyond DPO Meaning: Ever Heard of Outsourced DPO?

To avoid these types of ads, users are advised to pay more attention to Google search results to not click on ads instead of the legitimate search page result for the company.



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us