logo

Hackers Use 1Campaign to Hide Malicious Ads From Google Reviewers

ID: a9f3fe69-dea2-5f53-aabc-1da2f956fb67

STIX ID: report--a9f3fe69-dea2-5f53-aabc-1da2f956fb67

Feed Name: HackRead

Threat Score
72/100

Date Published: 2026-02-27

Date Updated: 2026-04-22

Author: Deeba Ahmed

...
...

Varonis Threat Labs discovered 1Campaign, a three-plus-year-old cloaking platform marketed to criminals to run persistent malvertising on Google Ads: it shows benign pages to reviewers while redirecting regular users to credential- and crypto-theft sites, uses fraud scoring to filter out reviewers and VPN users, and has been used in active campaigns with global targeting.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.