{"id":97484,"date":"2026-05-26T12:03:10","date_gmt":"2026-05-26T09:03:10","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=97484"},"modified":"2026-05-26T12:05:15","modified_gmt":"2026-05-26T09:05:15","slug":"fake-uniswap-ad-on-google-nets-scammers-400000","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/fake-uniswap-ad-on-google-nets-scammers-400000\/","title":{"rendered":"Fake Uniswap Ad on Google Nets Scammers $400,000"},"content":{"rendered":"<p>Unknown individuals placed malicious advertisements on Google search results, mimicking the interface of the <a href=\"https:\/\/forklog.com\/en\/news\/what-is-a-decentralised-exchange-dex\">DEX<\/a> Uniswap. Analysts report that the perpetrators have stolen at least $400,000 in cryptocurrency.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Community alert:<\/p>\n<p>A website impersonating Uniswap is draining funds from multiple wallets.<\/p>\n<p>The scammers are currently holding at least ~$400,000.<\/p>\n<p>0x37925684BA178821b4436E06e67f5dBD6cfA49Bb<br \/>0x2fC25F46cC49D226eF92E9A7665f3d2821F3c5E2<\/p>\n<p>Please only use official links, and\u2026 <a href=\"https:\/\/t.co\/JikqftTVHY\">pic.twitter.com\/JikqftTVHY<\/a><\/p>\n<p>\u2014 b-block (@b_block_oficial) <a href=\"https:\/\/twitter.com\/b_block_oficial\/status\/2058874189164040664?ref_src=twsrc%5Etfw\">May 25, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>An expert known as b-block reported that the fraudulent site redirected users to a clone website, which drained wallets upon connection. At the time of publication, two addresses associated with the scheme held 146 ETH (approximately $306,000).<\/p>\n<p>Researcher Stacy Muur noted that such phishing ads have been promoted to the top of search results for years, often appearing above official cryptocurrency project links.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Two scammers have already stolen ~$400,000 from users through a phishing <a href=\"https:\/\/twitter.com\/Uniswap?ref_src=twsrc%5Etfw\">@Uniswap<\/a> ad on Google.<\/p>\n<p>It\u2019s insane that Google has ignored this issue for years while fake links keep getting pushed above real ones and users keep getting drained.<\/p>\n<p>This is the first result that popped out\u2026 <a href=\"https:\/\/t.co\/Ov488s9DIl\">https:\/\/t.co\/Ov488s9DIl<\/a> <a href=\"https:\/\/t.co\/qStRGq8qTE\">pic.twitter.com\/qStRGq8qTE<\/a><\/p>\n<p>\u2014 Stacy Muur (@stacy_muur) <a href=\"https:\/\/twitter.com\/stacy_muur\/status\/2058889644935442468?ref_src=twsrc%5Etfw\">May 25, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>DeFiLlama confirmed that fake ads on Google remain one of the most common attack vectors in the decentralized finance sector.<\/p>\n<blockquote class=\"twitter-tweet\" data-conversation=\"none\">\n<p lang=\"en\" dir=\"ltr\">Fake ads on Google are a common source of phishing attacks.<\/p>\n<p>We built LlamaSearch to solve exactly this. It has thousands of vetted crypto domains.<\/p>\n<p>Access at <a href=\"https:\/\/t.co\/3ohXakDbIZ\">https:\/\/t.co\/3ohXakDbIZ<\/a> or <a href=\"https:\/\/t.co\/2uvCUnNTMy\">https:\/\/t.co\/2uvCUnNTMy<\/a><\/p>\n<p>\u2014 DefiLlama.com (@DefiLlama) <a href=\"https:\/\/twitter.com\/DefiLlama\/status\/2059003963446345776?ref_src=twsrc%5Etfw\">May 25, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Security Alliance (SEAL) specialists <a href=\"https:\/\/radar.securityalliance.org\/malicious-google-ads-targeting-crypto\/\">reported<\/a> a significant surge in such activity. From March 13 to 30, the organization blocked over 356 malicious ad links. The total damage from the campaign amounted to approximately $1.27 million.<\/p>\n<p>According to SEAL, the perpetrators use either direct ad purchases or compromised advertiser accounts for promotion. To bypass Google&#8217;s moderation, they display correct URLs while malicious code is loaded through a hidden frame, invisible to the search engine&#8217;s automated verification systems.<\/p>\n<p>In April, a fake Ledger Live app in the App Store helped hackers <a href=\"https:\/\/forklog.com\/en\/news\/fraudsters-steal-9-5-million-via-fake-ledger-app-in-app-store\">steal<\/a> cryptocurrency worth at least $9.5 million.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unknown individuals placed malicious advertisements on Google search results, mimicking the interface of DEX Uniswap. Analysts report that the perpetrators have stolen at least $400,000 in cryptocurrency.<\/p>\n","protected":false},"author":1,"featured_media":97485,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Scammers used fake Uniswap ads on Google to steal $400,000 in cryptocurrency.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,738,1246,1391],"class_list":["post-97484","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-google","tag-scammers","tag-uniswap-uni"],"aioseo_notices":[],"amp_enabled":true,"views":"12","promo_type":"1","layout_type":"1","short_excerpt":"Scammers used fake Uniswap ads on Google to steal $400,000 in cryptocurrency.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97484","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=97484"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97484\/revisions"}],"predecessor-version":[{"id":97486,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97484\/revisions\/97486"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/97485"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=97484"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=97484"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=97484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}