A campaign using sponsored search results is targeting home users and taking them to tech support scams.
Sponsored search results are the ones that are listed at the top of search results and are labelled “Sponsored”. They’re often ads that are taken out by brands who want to get people to click through to their website. In the case of malicious sponsored ads, scammers tend to outbid the brands in order to be listed as the first search result. The criminals that buy the ads will go as far as displaying the official brand’s website within the ad snippet, making it hard for an unsuspecting visitor to notice a difference.
Read more…
Source: Malwarebytes Labs
Related:
- Data breach sees Burger King Japan expose over 11 million customer records
October 19, 2026
The Japanese subsidiary of Burger King has confirmed suffering a data breach and apologized for losing sensitive data on millions of customers. In a breach notification letter, Burger King Japan confirmed the exact date of the breach, as well as the nature of the data that was stolen. “We identified a potential unauthorized third-party access to the ...
- Millions of California students’ sensitive data stolen in breach
October 19, 2026
Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational Testing Service (ETS). ETS is a nonprofit organization that helps run the state’s standardized tests under contract with the California Department of Education (CDE). It has begun notifying students and families after an unauthorized ...
- A fake WatchGuard VPN site is stealing your passwords
October 18, 2026
A fraudulent WatchGuard download website stole VPN login details while supplying the authentic installation package, experts have claimed. Security investigators at Huntress traced the activity to a lookalike domain that collected connection details before downloading the legitimate client. The investigation began after suspicious activity involving an administrator working for a managed service provider was detected. Read more… Source: TechRadar ...
- Cyber threat actors use a variety of techniques to target election and campaign officials
October 16, 2026
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are providing this Public Service Announcement (PSA) to raise awareness of the cyber threats facing election and campaign officials during the upcoming 2026 U.S. midterm elections. Additionally, this announcement provides the public with information on techniques, including phishing1 and smishing2, that ...
- Attack on BAE-managed system disrupts US bankruptcy courts
October 16, 2026
The US’ bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.” The Administrative Office of the US Courts said the websites and systems that support the Bankruptcy Noticing Center (BNC), which manages electronic comms related to bankruptcy cases, were pulled offline while the vendor investigates. BAE Systems runs the affected systems and ...
- AI-Powered Espionage Campaign Targets Government Linux Infrastructure
October 15, 2026
Unit 42 identified a campaign targeting government entities and state-affiliated infrastructure, with observed activity spanning from October 2025–April 2026. We track this activity as CL-UNK-1211. In the operations we witnessed, the attackers relied on AI-generated payloads. Multiple artifacts deployed throughout the intrusion contained AI-made conversational annotations and developer reasoning comments, suggesting that the code was either ...