Hackread

Malicious Google Ads Mislead Mac Users to Malware Sites

First seen 29 Jan 2026, 20:17 UTC • Webpronews

+6 •81% similarity •26.6

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A campaign using Google Ads has been identified that targets Mac users by redirecting them to fake Mac cleaner pages. This malicious activity exploits search engine results to distribute malware, affecting users who are searching for legitimate software. Users are advised to exercise caution when clicking on ads related to Mac cleaning tools.

ThreatCluster AI How this analysis works

Attack Flow

9 entities, 11 inferred relationships (STIX 2.1).

Technique (3)

Malware
T1041 - Exfiltration Over C2 Channel
T1071 - Application Layer Protocol

Campaign (1)

Fake Mac Cleaner Campaign

Malware (2)

Atomic Stealer
Mac Cleaner

Affected Platform (3)

Google Ads
MacOS
Windows

Relationships

Fake Mac Cleaner Campaign uses Atomic Stealer
Fake Mac Cleaner Campaign uses Mac Cleaner
Malware targets Google Ads
Malware targets MacOS
Malware targets Windows
T1041 - Exfiltration Over C2 Channel targets Google Ads
T1041 - Exfiltration Over C2 Channel targets MacOS
T1041 - Exfiltration Over C2 Channel targets Windows
T1071 - Application Layer Protocol targets Google Ads
T1071 - Application Layer Protocol targets MacOS
T1071 - Application Layer Protocol targets Windows

Community

Browse all →

Tracked Entities in This Story

Atomic Stealer Mac Cleaner Fake Mac Cleaner Campaign Google Ads MacOS Windows

Malicious Google Ads Mislead Mac Users to Malware Sites

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story