Fake Canva home page leads to browser lock

Malwarebytes researchers discovered a malvertising campaign in which attackers registered free Canva accounts to create designs that replicate the Canva homepage, then promoted those decoy pages via top-position Google search ads. When victims click the fake page, an external link opens in a new tab and hijacks the browser to display a fake Microsoft 'Windows locked' alert, likely intended to scam users or deliver further malware; the activity was reported to Google and Canva.