Cybercriminals Exploit Fake Google Ads to Ransack Advertiser Accounts

Summary: A sophisticated phishing campaign has been uncovered, where cybercriminals use fraudulent Google Ads to target advertisers, redirecting them to fake login pages. This operation exploits the trust in Google’s ad platform to steal credentials, which are then used to hijack accounts for malicious purposes. The scheme has been observed globally, with multiple distinct groups involved in executing the attacks.

Threat Actor: Cybercriminals | cybercriminals
Victim: Advertisers | advertisers

Keypoints :

• Fraudulent Google Ads redirect victims to fake login pages to steal credentials.
• Attackers impersonate Google Ads, targeting advertisers with substantial budgets.
• Three distinct groups identified: Brazilian Team, Asian Team, and Eastern European Team, each using different phishing techniques.