Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes
Researchers studying cybersecurity have warned of a new malvertising effort that aims to phish for users' credentials through phoney Google ads, targeting both individuals and companies that use Google Ads.
Jérôme Segura, senior director of threat intelligence at Malwarebytes, told The Hacker News that the plan involves spoofing Google Ads to capture as many advertising accounts as possible and rerouting users to phony login pages.
It is believed that the campaign's ultimate objective is to sell the credentials to other criminal actors on underground forums and use them again to continue the activities. Posts on Google's support forums, Bluesky, and Reddit indicate that the threat has been active since at least mid-November 2024 read more about Google Ads Users Targeted in Malvertis...