If you search for Chrome on Bing.com, the first link is a spyware

15 points by baby 11y ago ↗ HN

I just reformated my dad's computer and the first thing he installs is a bunch of spyware. I asked him to show me exactly what he did during that first minute of fresh clean installation of windows 7:

He binged "chrome" and opened the first link. Bam. Spyware.

You can check for yourself here: http://www.bing.com/search?q=chrome&go=Valider&qs=n&form=QBLH&pq=chrome&sc=8-6&sp=-1&sk=&cvid=0d921f38267d4a129916e5c8dfa93418

might be just in french though, looks so legit:

Telecharger Google Chrome | Google.com www.Google.com/Chrome Téléchargez Google Chrome Gratuit ! Dernière Version

How come they can enter a fake domain name in the advertisement program of Bing?

13 comments

[ 4.7 ms ] story [ 38.1 ms ] thread

88e282102ae2e5b 11y ago ↗

Following your link gets me the official Google Chrome page as the first link. Must be location-specific.

d0ugie 11y ago ↗

Or they fixed it/bing corrected itself, or it was an anomaly - hey OP, how about a screenshot?

What I'd bet against is it being deliberate, unless an employee went rogue.

fir3shark 11y ago ↗

For me, the first search result is chrome official page, but above that is the ad which links to spyware website.

sivalingam 11y ago ↗

I'm from India, it points me to official Google Chrome page as the first link. Definitely its location specific as he said.

phatak-dev 11y ago ↗

It's the ad that points to fake not to the first search result.

bjmarte 11y ago ↗

Or he already had spyware on his machine that was altering his search results.

baby 11y ago ↗

not that many spywares survive a reformatting.

Jyaif 11y ago ↗

Can confirm (I'm in France): http://i.imgur.com/2Mslw61.png First ad is a link to: http://r9.chr.telecharger-ici.com/?pk_campaign=Chr-yahoosear...

aidos 11y ago ↗

I saw this last week in the uk. It is (or at least was) a genuine widespread issue.

m_93 11y ago ↗

Poland - normal result page without link which you describe.

Spidler 11y ago ↗

First three links appear to be malicious:

Google Chrome Free - Install Chrome® Free For Your PC! Chrome.freepc-download.com

Download Chrome Browser 100% Free!

Chrome download | downloadian.com downloadian.com/chrome

Ladda ner den senaste versionen av Chrome gratis på svenska! Chrome download | chrome.downloadem.com chrome.downloadem.com

Spidler 11y ago ↗

Same for firefox: http://www.bing.com/search?q=firefox&qs=n&form=QBLH&pq=firef...

Top link will be: > Firefox - Download Latest Version. 100% Free. > Firefox.freegogo-download.com

Which is InstallCore infected.

nmeofthestate 11y ago ↗

I got hit by this a few weeks ago, on a box fresh laptop (uk).