Le faux badge Google qui piège les entreprises
This article details a phishing scam targeting businesses, specifically Google Business Profile owners, using a fake Google advisor to convince them to purchase a "Badge Google" to maintain their online visibility. The scammer initiates contact via a phone call, then directs victims to a convincing fake website mimicking Google’s branding. The site offers a range of services – including a ‘Badge Google Verified’ – at escalating prices, designed to create a sense of urgency and exploit the fear of losing their online presence. The scam is sophisticated, presenting a complete sales package rather than a single isolated payment request, and leverages a visually rich and detailed website to build trust and overcome potential skepticism.
This article details a phishing scam targeting businesses, specifically Google Business Profile owners, using a fake Google advisor to convince them to purchase a "Badge Google" to maintain their online visibility. The scammer initiates contact via a phone call, then directs victims to a convincing fake website mimicking Google’s branding. The site offers a range of services – including a ‘Badge Google Verified’ – at escalating prices, designed to create a sense of urgency and exploit the fear of losing their online presence.
An attacker initiates contact via a phone call, impersonating a Google advisor. The caller claims that a business’s Google Business Profile is threatened and that purchasing a "Badge Google" is necessary to preserve its visibility and prevent deletion. The initial contact is designed to create a sense of urgency and exploit the fear of losing a valuable online tool.
The scammer then directs victims to a website that closely resembles Google’s official design, creating a strong illusion of legitimacy. The website presents a comprehensive sales package, offering various services at different price points, including the ‘Badge Google Verified’ (at 269€), ‘G-AdminReclamation’ (1299€), ‘VigilAvis IA’ (199€/year), and ‘G-ADS’ (358€). These services promise features like a Google France technician validating the badge, a review monitoring system, and a comprehensive Google Business profile management solution.
The website is deliberately designed to be visually rich and detailed, presenting a complete sales catalog rather than a single isolated payment request. This complexity is intended to overwhelm potential skeptics and create a sense of legitimacy. The attacker uses a combination of psychological manipulation and a well-crafted website to convince victims to take immediate action.
The article highlights the sophistication of the attack, emphasizing that it goes beyond a simple fake payment button. Instead, it presents a complete sales package with distinct offers, colors, and labels, mimicking a legitimate Google service. The goal is to create a sense of urgency and exploit the fear of losing a crucial online presence.
Ultimately, the article advises businesses to remain vigilant and to question any unsolicited requests for payment, particularly those involving online visibility tools. It stresses the importance of breaking the pace of the conversation and independently verifying the identity of the person making the request before taking any action.