Google now pays for bugs used to bypass its anti-fraud systems

guest · Sep 2, 2020

Google now pays for bugs used to bypass its anti-fraud systems
September 1, 2020
https://www.bleepingcomputer.com/ne...r-bugs-used-to-bypass-its-anti-fraud-systems/

Google today announced that the company's Vulnerability Reward Program has expanded to also include bug reports on methods threat actors can use to bypass the company's abuse, fraud, and spam systems.

"A few examples of potentially valid reports for this program could include bypassing our account recovery systems at scale, identifying services vulnerable to brute force attacks, circumventing restrictions on content use and sharing, or purchasing items from Google without paying," Google's Eric Brown and Marc Henson said.
Click to expand...

Reports highlighting such abuse techniques submitted to the Google Vulnerability Reward Program (VRP) will be reviewed by the company's Trust & Safety team whose experts are specialized in preventing and mitigating abuse, fraud, and spam activity across Google's product platforms.

"This program does not cover individual instances of abuse, such as the posting of content that violates our guidelines or policies, sending spam emails, or providing links to malware," they added.
Click to expand...

Google: Announcing new reward amounts for abuse risk researchers

It has been two years since we officially expanded the scope of Google’s Vulnerability Reward Program (VRP) to include the identification of product abuse risks.

Thanks to your work, we have identified more than 750 previously unknown product abuse risks, preventing abuse in Google products and protecting our users. Collaboration to address abuse is important, and we are committed to supporting research on this growing challenge. To take it one step further, and as of today, we are announcing increased reward amounts for reports focusing on potential attacks in the product abuse space.
Click to expand...

What’s new? Based on the great submissions that we received in the past as well as feedback from our Bug Hunters, we increased the highest reward by 166% from $5,000 to $13,337. Research with medium to high impact and probability will now be eligible for payment up to $5,000.
[...]
What's next? We plan to expand the scope of Vulnerability Research Grants to support research preventing abuse risks. Stay tuned for more information!
Click to expand...

Log in or Sign up

Google now pays for bugs used to bypass its anti-fraud systems

guest Guest

Log in or Sign up

Google now pays for bugs used to bypass its anti-fraud systems

guest Guest

Useful Searches