[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6RwZaF3CP9JDAarCn1wt3jeB6QSnPJ1ipCA1qoA1XE4":3},{"article":4,"iocs":43,"watch_terms":47,"solutions":48,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"af32b7c3-dee8-413d-a2ac-f1ba0cbeb144","Tech Support Scam Kit Uses Google Ads to Deliver Fake Security Alerts","tech-support-scam-kit-uses-google-ads-to-deliver-fake-security-alerts-4a9f53","Google Ads deliver a tech support scam kit that shows fake security alerts, makes browsers appear locked and…","A tech support scam kit is leveraging Google Ads to distribute fake security alerts, making browsers appear locked and targeting users across hundreds of organizations. The campaign, observed by Netskope, uses a mouse movement trigger to evade automated analysis and displays convincing fake security alerts mimicking Microsoft Defender or Apple storefronts, pressuring users to call a support number.","Tech support scam kit uses Google Ads to deliver fake security alerts and lock browsers.","https:\u002F\u002Fhackread.com\u002Ftech-support-scam-kit-google-ads-fake-security-alerts\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002Ftech-support-scam-kit-google-ads-fake-security-alerts.jpg","2026-09-28T10:22:58+00:00","2026-09-28T18:00:35.298452+00:00",7,[17,20,23],{"name":18,"type":19},"Google Ads","product",{"name":21,"type":22},"Netskope","vendor",{"name":24,"type":19},"Microsoft Defender","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":25,"icon":27,"name":28,"slug":29},null,"Threat Intelligence","threat-intelligence",[31,36,41],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":37},{"id":38,"icon":27,"name":39,"slug":40},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":42},{"id":25,"icon":27,"name":28,"slug":29},[44],{"type":40,"value":45,"context":46},"CypherLoc","Similar scareware campaign identified by Netskope",[21,18,24],{"controls":49,"vendors":130},[50,79,105],{"slug":51,"name":52,"problem":53,"products":54},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"quad9","Quad9","\u002Fvendor-logos\u002Fquad9.png","quad9-dns","Quad9 DNS","https:\u002F\u002Fwww.quad9.net\u002F","Free, privacy-focused DNS resolver that blocks malicious domains using threat intelligence feeds.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","umbrella","Cisco Umbrella","https:\u002F\u002Fumbrella.cisco.com\u002F","DNS-layer security and secure web gateway delivered from the cloud.",{"slug":80,"name":81,"problem":82,"products":83},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[84,89,97],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":85,"product_name":86,"url":87,"description":88},"cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.",{"slug":106,"name":107,"problem":108,"products":109},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[110,116,123],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":111,"product_name":112,"url":114,"description":115},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":117,"product_name":120,"url":121,"description":122},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":106,"product_name":127,"url":128,"description":129},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[131],{"slug":132,"name":21,"logo_path":133,"roles":134},"netskope","\u002Fvendor-logos\u002Fnetskope.png",[135],"reported_by",{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":149},"fake-security-alerts-via-google-ads-target-hundreds-of-organizations","Fake Security Alerts via Google Ads Target Hundreds of Organizations","This campaign exploits users' trust in familiar brands like Microsoft Defender and Apple by delivering convincing fake security alerts through paid Google Ads, making the threat appear highly legitimate. The use of a mouse movement trigger to evade automated analysis demonstrates that attackers are actively engineering their kits to bypass traditional security scanning tools. End users who lack training in recognizing social engineering tactics are the primary vulnerability being exploited here. This matters because successful scams can lead to financial loss, credential theft, and unauthorized remote access to corporate systems when victims call the fraudulent support numbers.",[141,142,143,144,145,146,147,148],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 9 – Email and Web Browser Protections","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-50 – Building an Information Technology Security Awareness and Training Program","NIST AT-2 – Literacy Training and Awareness","NIST SI-3 – Malicious Code Protection","NIST SP 800-83 – Guide to Malware Incident Prevention and Handling","GDPR Article 32 – Security of Processing (organizational measures to protect users)",{}]