GoKawiil
Tech News
Security firm Infoblox published a report detailing Help TDS, a traffic distribution system that has been abused since 2017 to funnel victims into fake Microsoft tech support scams. Researchers gained direct access to the platform's affiliate panel, revealing how scammers use fake security alerts to lure victims into calling bogus support lines staffed by criminals who push remote desktop software onto victims' machines.
The real-time auction that places ads is an automated pipeline for running code and targeting individuals. Both properties have been used deliberately.
Push Security reports that a malvertising campaign is routing Google search ads through Bing's trusted click-tracking domain before funneling victims through a hacked WordPress site to a fake Claude download page. The scheme, found after a malicious ad surfaced for searches like "claude mac," uses layered cloaking checks to hide the malicious payload from scanners and direct visitors, ultimately pushing macOS users toward ClickFix-style attacks that trick them into running malicious commands.
Security firm Netskope found Google ads pushing a browser-locking scam across hundreds of legitimate websites, including maps, weather and sports sites, from August 31 to September 14. The fake alerts freeze the screen, hide the cursor and disable exit keys to pressure victims into calling a bogus support number, where scammers demand fees, remote access or personal data; Netskope says it blocked the attempts for the 619 client organizations it monitored, over 60 percent of them in the US.