Hackers Use 1Campaign to Hide Malicious Ads from Google Reviewers

Varonis Threat Labs identified 1Campaign, a platform used by hackers to cloak malicious ads and evade detection by Google Ads reviewers. The tool conceals phishing pages, displaying legitimate content to security teams while redirecting real users to fraudulent sites. The campaign leverages cloaking techniques to bypass Google’s automated and manual review processes. No specific dates, victim counts, or technical indicators (e.g., CVE IDs) were disclosed in the report. The primary impact involves malvertising and phishing scams targeting unsuspecting users through deceptive Google Ads.