Online ads just became the internet's biggest malware machine, report says

"Advertising accounted for more than 60% of the malware and phishing campaigns observed by The Media Trust in 2025. Instances of malware delivered via programmatic channels grew 45% year-on-year, per the report."

"The Media Trust said the threat has been compounded by advances in the $791 billion digital advertising space. Artificial intelligence makes it easier than ever to generate ads - such as celebrity deepfakes - and precision-target the most vulnerable consumers."

"Cybercriminals are also getting better at exploiting the sprawling chain of adtech vendors that power programmatic advertising to cover their tracks, despite the industry's yearslong efforts to root out scammers, the report said."

Malicious online advertisements have become the dominant vector for malware and phishing attacks in 2025, overtaking email scams and direct hacks. Programmatic advertising—automated, real-time targeted ad placement—accounts for more than 60% of observed malware and phishing campaigns. Year-over-year instances of malware via programmatic channels increased 45%. The threat intensifies due to artificial intelligence advances enabling sophisticated attacks like celebrity deepfakes and precision targeting of vulnerable consumers. Cybercriminals exploit the complex adtech vendor ecosystem to conceal their activities. Programmatic advertising's expansion into connected TV, digital out-of-home, and retail media has created additional attack surfaces. Approximately 80% of website and app source code facilitates data collection and user monitoring, providing opportunities for malicious actors.

Read at Business Insider