Skip to content
ThreatCluster

Targeted Spear-Phishing Campaigns Exploit Google Ads and WhatsApp

First seen 19 Jan 2026, 18:31 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A spear-phishing campaign is utilizing Google Ads to distribute EndRAT malware, targeting users with remote access trojans. Simultaneously, Israel's National Cyber Directorate issued an alert regarding a separate spear-phishing attack that targets professionals in security and defense, using deceptive WhatsApp messages that lead to fake websites designed to steal personal information.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

More articles in this cluster (6)

Following this threat?

Track EndRAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed