Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
If you search for Chrome on Bing.com, the first link is a spyware
15 points by baby on Jan 10, 2015 | hide | past | favorite | 13 comments
I just reformated my dad's computer and the first thing he installs is a bunch of spyware. I asked him to show me exactly what he did during that first minute of fresh clean installation of windows 7:

He binged "chrome" and opened the first link. Bam. Spyware.

You can check for yourself here: http://www.bing.com/search?q=chrome&go=Valider&qs=n&form=QBLH&pq=chrome&sc=8-6&sp=-1&sk=&cvid=0d921f38267d4a129916e5c8dfa93418

might be just in french though, looks so legit:

Telecharger Google Chrome | Google.com www.Google.com/Chrome Téléchargez Google Chrome Gratuit ! Dernière Version

How come they can enter a fake domain name in the advertisement program of Bing?



Same for firefox: http://www.bing.com/search?q=firefox&qs=n&form=QBLH&pq=firef...

Top link will be: > Firefox - Download Latest Version. 100% Free. > Firefox.freegogo-download.com

Which is InstallCore infected.


Can confirm (I'm in France): http://i.imgur.com/2Mslw61.png First ad is a link to: http://r9.chr.telecharger-ici.com/?pk_campaign=Chr-yahoosear...


First three links appear to be malicious:

Google Chrome Free - Install Chrome® Free For Your PC! Chrome.freepc-download.com

Download Chrome Browser 100% Free!

Chrome download | downloadian.com downloadian.com/chrome

Ladda ner den senaste versionen av Chrome gratis på svenska! Chrome download | chrome.downloadem.com chrome.downloadem.com


I saw this last week in the uk. It is (or at least was) a genuine widespread issue.


Following your link gets me the official Google Chrome page as the first link. Must be location-specific.


For me, the first search result is chrome official page, but above that is the ad which links to spyware website.


It's the ad that points to fake not to the first search result.


Or they fixed it/bing corrected itself, or it was an anomaly - hey OP, how about a screenshot?

What I'd bet against is it being deliberate, unless an employee went rogue.


I'm from India, it points me to official Google Chrome page as the first link. Definitely its location specific as he said.


Or he already had spyware on his machine that was altering his search results.


not that many spywares survive a reformatting.


I got hit by this a few weeks ago, on a box fresh laptop (uk).


Poland - normal result page without link which you describe.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: