Malicious Ads Bypass Google Ads Screening via New Campaign Platform Exploit

The report describes 1Campaign, a sustained cloaking-as-a-service platform that helps operators (alias DuppyMeister) run malicious Google Ads by filtering researchers and automated scanners, delivering phishing and crypto-drainer sites to targeted users through fraud scoring, geo/device targeting, and dynamic blocking; researchers observed high block rates for non-targets and integrated tooling that increases campaign longevity and evasion of traditional URL scanners.