Fake Uniswap Google Ads Steal $400K

A coordinated phishing campaign is actively exploiting Alphabet Inc.'s advertising platform to steal cryptocurrency from users searching for Uniswap. Scammers purchase sponsored Alphabet Inc. Ads that appear above legitimate Uniswap links, directing unsuspecting users to cloned websites that perfectly mimic Uniswap's interface. Once on these fake sites, victims are tricked into connecting their wallets and approving malicious transactions, which grants attackers permission to drain their assets. On-chain analyst BlockFi and Web3 marketer Stacy Muur have tracked the campaign, with at least $400,000 in Ethereum and other cryptocurrencies stolen. Cloud Security Alliance (SEAL) reported a significant increase in such phishing activity, blocking over 356 malicious links and noting the campaign has been active for over a year. Critics, including Stacy Muur, have condemned Alphabet Inc. for its failure to address these recurring issues effectively, despite years of complaints from the crypto community. The scam highlights a critical risk for users of self-custodial protocols, as the responsibility for verifying URLs and transaction details falls squarely on them. While Uniswap itself has not been hacked, the repeated high-profile attacks could erode user trust in the DEX sector.