"The volume of these things is immense," says Sean Gallagher, the senior threat researcher at Sophos. "Search engines like Google will say they check the content of ads to ensure they're safe, but the thing is that attackers are using ad delivery networks and can redirect the URL after the ad is paid for."
Google is clearly aware that malicious ad activity is growing and evolving. The company specifically addresses misleading and fraudulent ad activity in its policies, including a "misrepresentation policy," and says that it takes numerous approaches to vetting ads and detecting malvertising. In 2023, Google blocked or removed about 5.5 billion ads and suspended more than 12.7 million advertiser accounts.
"We expressly prohibit ads that attempt to circumvent our enforcement by disguising the advertiser's identity to deceive users and distribute malware," Google spokesperson Nate Funkhouser told WIRED in a statement. "When we identify an ad that violates this policy, we remove it and suspend the associated advertiser account as quickly as possible."
Collection
[
|
...
]