Hackers are increasingly using Google Ads to target specific individuals

by IANS |

New Delhi, Dec 29 (IANS) Hackers have increased their abuse of the Google Ads platform to target users searching for popular software products.

Among the software products being impersonated include Grammarly, Slack, Dashlane, Audacity, ITorrent, AnyDesk, Libre Office, Teamviewer, Thunderbird, and more, reports Bleeping Computer.

"The threat actors clone official websites of the above projects and distribute trojanised versions of the software when users click the download button," the report mentioned.

The Google Ads platform helps advertisers promote pages on Google Search.

Users looking for original software products on a browser without an active ad blocker are likely to click on malicious links "because it looks very similar to the actual search result".

"The moment those 'disguised' sites are being visited by targeted visitors, the server immediately redirects them to the rogue site and from there to the malicious payload," explained Guardio Labs.

Those rogue sites are practically invisible to visitors.

If Google detects that the landing site is malicious, the campaign is blocked and the ads are removed.

The malware payload, which comes in ZIP or MSI form, is downloaded from reputable file-sharing and code-hosting services such as GitHub, Dropbox, or Discord's CDN.

"This ensures that any anti-virus programmes running on the victim's machine won't object to the download," the report mentioned.

Guardio Labs recently observed a campaign where the threat actor lured users with a trojanised version of Grammarly. The malware was bundled with the legitimate software.

Latest News
Sensex crosses 74K mark in 1000 points rally Thu, Mar 28, 2024, 03:42 PM
Man stabbed to death during fight over drinking water Thu, Mar 28, 2024, 03:41 PM
Actor Mukesh, BJP candidate Ashwini file nominations in Kerala Thu, Mar 28, 2024, 03:22 PM
Gillespie resigns from his role as South Australia, Adelaide strikers' head coach Thu, Mar 28, 2024, 03:15 PM
'No scope for individuality in party', Karnataka DyCM Shivakumar warns warring leaders Thu, Mar 28, 2024, 03:10 PM
Ukrainian FM arrives in India to build on talks between PM Modi, Volodymyr Zelenskyy Thu, Mar 28, 2024, 03:02 PM
Political conspiracy, claims Kejriwal while being taken to Rouse Avenue Court Thu, Mar 28, 2024, 02:47 PM
NXP Semiconductors unveils industry-first platform for software-defined vehicles Thu, Mar 28, 2024, 02:41 PM
CM Vijayan & CPI(M) tread cautiously after ED case against Veena Vijayan Thu, Mar 28, 2024, 02:37 PM
IPL 2024: 'They opened for Australia...', says Ganguly on DC's opting for Warner, Marsh as opening pair vs PBKS Thu, Mar 28, 2024, 02:28 PM
India's trade policy is calibrated with economic growth path: Piyush Goyal Thu, Mar 28, 2024, 02:17 PM
Holi brings cheer to UP excise dept as sales soar Thu, Mar 28, 2024, 02:11 PM
Punjab CM Bhagwant Mann blessed with baby girl Thu, Mar 28, 2024, 02:10 PM
New AI tool can predict fatal heart rhythm with 80 pc accuracy Thu, Mar 28, 2024, 12:41 PM
IPL 2024: 'Perplexed, beyond my understanding', Smith, Pathan slam Hardik's tactics of using Bumrah vs SRH Thu, Mar 28, 2024, 12:27 PM