Fake PDF and search tools hijacked searches for 13.4 million Chrome users
Socket tied 319 mostly unlisted Chrome Web Store extensions, promoted by ads, to query proxying toward Yahoo or Bing.
72
Product
Google Ads
- Mentions · 7d1
- Mentions · 30d5
- All mentions9
- First seenSep 17, 2026
- Last mentioned2d ago
Timeline
9 articles · newest firstPhishing campaign uses stolen GCP access to bill victims for LLMs
Attackers phished MFA codes, linked foreign projects to victim billing, and kept Gemini prompts hidden from the organization.
74
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
Hackers use Google Ads and Bing redirects to deliver fake Claude installers that run ClickFix commands.
73
Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
Attackers use fake ChatGPT, Claude, and Gemini ad sites to steal passwords and MFA codes.
71
Fake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts
Phishers impersonate ChatGPT, Claude, and Gemini ad tools, using fake browser windows to steal passwords and MFA approvals.
66
Threat Actors Use Google Ads To Target Ledger Users
Attackers used malicious Google ads to phish Ledger users for cryptocurrency recovery phrases.
71
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Netskope found Google Ads delivering scareware that fake-freezes Windows and Mac browsers and pushes users toward bogus call centers.
58
Google Ads Campaign Spreads Fake Security Alerts That Lock Browsers and Push Malware
Netskope found Google Ads scareware that fake-locks browsers and pushes victims to call fraudulent support lines.
55
“Zero-Code Cloaking”: Attackers Weaponize Google Search and Hacked .ac.th Domain to Bypass Ad Moderation
Attackers chain Google search results, a hacked Thai .ac.th domain, and redirects to push illegal casino ads past moderation, at industrialized scale across gov/edu sites.
45
Appears with
- Googlevendor · 9
- Claudeai model · 3
- Geminiai model · 3
- Anthropicvendor · 3
- Googleorganization · 3
- Netskopeorganization · 2
- Claudeproduct · 2
- Applevendor · 2
- ChatGPTai model · 2
- OpenAIvendor · 2
- Anthropicorganization · 2
- Bingproduct · 2
- Microsoftvendor · 2
- Mistral AIorganization · 1
- Google Cloud Storageproduct · 1
- Google Cloud Platformproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.