DeepSeek users targeted with fake sponsored Google ads that deliver malware

Malwarebytes researchers describe a campaign where criminals purchase fake Google sponsored ads impersonating the DeepSeek brand to direct users to a convincing counterfeit site that serves an MSIL Trojan (detected as Malware.AI.1323738514). The post compares fake and legitimate search results, shows the fraudulent site, and recommends mitigations including never clicking sponsored results, checking the advertiser, and using an ad-blocker.