Malvertisers Using Google Ads to Target Users Searching for Popular Software
There are details available regarding a malicious campaign that uses Google Ads to spread next-stage payloads and send people looking for well-known software to fake landing pages.
This behavior was found by Malwarebytes, which described it as "unique in its way to fingerprint users and distribute time-sensitive payloads."
In order to deliver fake advertisements on the Google search results page that, when clicked, filter out bots and other unwanted IP addresses by displaying a spoof website, the attack targets visitors who are specifically looking for Notepad++ and PDF converters.
If the threat actor thinks the visitor is interesting, it will send the victim to a spoof website that promotes the program while discreetly fingerprinting the system to find out if the request is comi...