Internet users who use search engines to visit sites and pages on the internet (like almost everyone else) should always keep their eyes open. This is because any seemingly innocent software download advertisement could be hiding malicious applications or adware.
Bleeping Computer spotted a suspicious Chrome while using the Bing search engine. The ad appears with the title “Chrome Download” and contains a relevant URL, and it looks similar to other Chrome ads, so it’s hard to question its legitimacy.
After clicking on the ad, the user is redirected to a website called www.googlechrome2018.com. Then, a download prompt appears on the screen. The installation file, named ChromeSetup.exe, has been identified by VirusTotal as an InstallCore bundle.
ChromeSetup.exe, when launched, prompts users to install various applications including potentially unwanted programs (PUPs). It then installs a Portuguese version of Google Chrome.
What if a user is already using Chrome? Of course, scammers have anticipated that as well. If you visit the page via Bing using Chrome, you'll be prompted to download an extension called Chrome Search Manager.
Bleeping Computer has already reported the ad to Bing and it may take a few days for it to be removed. It may have already been removed or the ad in question may be limited in scope.
However, it is recommended to download any software from trusted download sources or directly from the official website. And this does not mean that you should stop clicking on ads completely, just pay more attention to the URL in such cases.
