A screenshot shows a search in Google for "keepass" brings up a fake and paid results first, for keypass[.]info, which will serve you a download it claims is Keepass but is really a trojan.

Notices where this attachment appears

1. BrianKrebs (briankrebs@infosec.exchange)'s status on Friday, 20-Oct-2023 00:02:59 JST BrianKrebs

   Like Microsoft, Google really needs to get a handle on criminals paying them to spread malware disguised as legit software. These paid results are so dangerous because they show up before any organic search results. e.g., woe to those who recently searched for KeePass.

   Google-hosted malvertising leads to fake Keepass site that looks genuine

   https://arstechnica.com/security/2023/10/google-hosted-malvertising-leads-to-fake-keepass-site-that-looks-genuine/