Security researchers recently identified a widespread tech support scam leveraging Google’s advertising platform to target computer users across the globe. The campaign displayed ads on popular websites including maps, weather, real estate, document hosting, and sports sites. When users clicked on these ads, their browsers would freeze with messages claiming infection and urging them to contact a fraudulent support center.
Between August 31 and September 14, security firm Netskope observed more than 250 separate Google Ads campaign IDs associated with the scam appearing on at least 284 legitimate publisher websites. The firm tracked clicks from users at 619 customer organizations, with approximately 62 percent located in the United States. Japan and Australia represented the second and third highest concentrations of exposure. However, researchers note that Netskope’s visibility covers only a fraction of overall internet traffic, suggesting the actual number of people exposed to these malicious ads is substantially higher.
The scam operates through sophisticated technical deception. Upon clicking the ad, users encounter a full-screen fake security warning that disables standard browser exit functions, mimics legitimate infection indicators, degrades browser performance, and plays audio cues to convince victims their devices are compromised. The malware toolkit is designed to be stealthy, displaying different warnings depending on whether the target device runs Windows or macOS. The software encrypts its payload, only decrypting it in browser memory, which makes detection by security software more difficult.
No actual damage occurs to affected devices despite the convincing appearance of a system lockup. Users who encounter the scam can typically exit by holding the escape key for several seconds or using task manager functions to force-close the browser. Researchers emphasize that legitimate technology companies never request users to call phone numbers in response to security threats, and victims should not contact the numbers displayed in such warnings.
Google stated it maintains a zero-tolerance policy toward scams and indicated it is investigating the campaigns while taking action against violating accounts. The company previously reported blocking over 99 percent of policy-violating ads before serving, though it did not explain how these particular ads circumvented its screening systems or confirm complete removal from its platform.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI