Semrush impersonation scam hits Google Ads

Malwarebytes reports an active phishing campaign where attackers buy malicious Google Ads and impersonate Semrush to redirect victims to fake login pages that only accept “Log in with Google,” harvesting Google credentials. Compromised accounts could expose Google Analytics and Search Console data and enable further fraud or spear-phishing via Semrush account information; Malwarebytes provides a list of malicious domains and states the incidents were reported to Google.