Google Ads invites being abused to push spam, adult sites

guest · Jan 23, 2023

By Ax Sharma @Ax_Sharma - January 23, 2023

Google Ads invites are being abused to deliver email messages promoting spam and sex websites to users who are otherwise not necessarily using Google advertising platforms.
Click to expand...

The Google Ads platform allows advertisers to create advertising campaigns on publisher partner's web sites and in Google search results.

The recently seen widespread campaign involves threat actors using the Google Ads admin interface to send bulk email invitations that, coming from Google, bypass recipient spam filters.
Click to expand...

Careful with that invite!
Users around the world are reporting receiving emails from authentic Google Ads accounts that are catching their attention.

These bogus invite emails, sent from Google's servers entice users to visit spam links contained in the email message.

"The mail is sent from official Google address 'Google Ads ads-account-noreply@google.com'" writes Redditor erohtar.
"I've been trashing the emails but it would be nice if Google would get a handle on their products so their users aren't having to constantly guard against phishing scams," commented Brandon on a Google community forum thread started by another affected person.
Click to expand...

Websites promote adult content
Google Ads account administrators can use the "invitations" feature to add new users to the account admin interface via email invites.

But, it looks like clever threat actors have yet again found a way to misuse the feature for their nefarious activities.
Click to expand...

To better understand the issue and how Google plans on remedying it, BleepingComputer emailed Google well in advance of publishing.

"Our security teams are aware of this spam content and are working hard, as always, to stay ahead and keep our users safe," a Google spokesperson said in a statement to BleepingComputer.
"We have strict Google Ads policies against misrepresentation and have taken appropriate action. We encourage users to report messages when they receive emails containing spam links to help us take appropriate action on accounts involved in the spam."
Update Jan 23 2023, 8:57 PM: Added Google's statement received after publishing.
Click to expand...

Log in or Sign up

Google Ads invites being abused to push spam, adult sites

guest Guest

Log in or Sign up

Google Ads invites being abused to push spam, adult sites

guest Guest

Useful Searches