Hackers Hijack Google Ads for Scams

A sophisticated cloaking platform, known as 1Campaign, is empowering cybercriminals to execute large-scale ad fraud by bypassing security measures on Google's advertising platforms. This service permits hackers to conceal malicious content from security researchers and automated scanners, presenting them with a benign white page while unsuspecting users are targeted with phishing or scam attempts. The tool offers real-time analytics, visitor profiling, fraud scoring, and traffic blocking, allowing tailored content delivery based on user data such as IP addresses and device types. Developed by an individual known as "DuppyMeister," 1Campaign has been available for three years and operates through secret Telegram channels, boasting a high success rate in evading traditional detection methods. Recent reports highlight the manipulation of search engines and browsers to surface malicious ads, with one instance involving hundreds of ads targeting Mac users searching for software downloads, launched after taking over 35 Google Advertiser accounts.