Malvertising Campaign Impersonates Microsoft Teams

Researchers at Malwarebytes observed a malvertising campaign using fake Microsoft Teams ads purchased on Google to redirect macOS users to a malicious site (teamsbusiness.com) that delivers Atomic Stealer. The campaign used display URLs that appeared legitimate, advanced filtering to evade detection, and instructed users to right-click the mounted .dmg to bypass macOS installer protections; the ads were likely run via a compromised Google ad account.