Malicious Ads on Google Target Chinese Users with Fake Messaging Apps

Malicious Google Ads and phishing-as-a-service (Greatness) campaigns are actively targeting Chinese-speaking users and South Korean companies to deliver RATs (PlugX, Gh0st RAT, AsyncRAT) and credential-harvesting pages; attackers use Google infrastructure (Docs/Sites) and malicious attachments or LNK shortcuts to distribute payloads and exfiltrate credentials, with the phishing kit sold and supported to enable large-scale abuse.