Google searches are becoming a bigger target of cybercriminals with the rise of 'malvertising'
Google searches are now being routinely used to surface online ads with malicious purposes, in a hacking approach known as 'malvertising.'
Hackers are increasingly using online ads for malicious purposes. Often, it's happening through routine Google searches.
These schemes are dubbed malvertising, and cyber criminals are striking more often and with increased sophistication. In fall 2023, cybersecurity software firm Malwarebytes tracked a 42% increase month-over-month in malvertising incidents in the U.S. All types of brands are being targeted, whether it's for phishing purposes or for actual malware, said Jérôme Segura, senior director of research at Malwarebytes. "What I'm seeing is just the tip of the iceberg," he said.
Many of these rogue ads appear as sponsored content during a search engine query on a desktop or mobile device. But malicious code can also be hidden in ads that appear on mainstream websites consumers routinely visit. Some of these ads will only ensnare consumers who click on them, but in some cases, people can be vulnerable in a more passive way — sometimes just by visiting an infected site, said Erich Kron, security awareness advocate for KnowBe4, a security awareness and training company.