
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
Socket tied 319 mostly unlisted Chrome Web Store extensions, promoted by ads, to query proxying toward Yahoo or Bing.
9 stories, newest first · one card per story

Socket tied 319 mostly unlisted Chrome Web Store extensions, promoted by ads, to query proxying toward Yahoo or Bing.

macOS ClickFix commands fetch Atomic macOS Stealer; a Windows Artifact runs a packed .NET payload with remote access.

Hackers use Google Ads and Bing redirects to deliver fake Claude installers that run ClickFix commands.

Attackers used malicious Google ads to phish Ledger users for cryptocurrency recovery phrases.

Netskope found Google Ads delivering scareware that fake-freezes Windows and Mac browsers and pushes users toward bogus call centers.
Netskope found Google Ads scareware that fake-locks browsers and pushes victims to call fraudulent support lines.

Attackers chain Google search results, a hacked Thai .ac.th domain, and redirects to push illegal casino ads past moderation, at industrialized scale across gov/edu sites.

NYU and Radboud researchers built AdLens, which found 238 scareware and 3,346 false-claim ads in Google's ad archive; reported ads often stayed live.

Google announced new AI and agentic features across Google Ads and Google Analytics to simplify marketing workflows.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views