Researchers Identified Google Ads Support Scam

A widespread fraudulent campaign used fake browser security warnings to trick users into contacting a fake support center.

Updated on Oct. 14, 2026 in Cybersecurity

Researchers Identified Google Ads Support Scam

Live Poll

Do you generally trust that advertisements you see on popular websites are safe to click?

Between August 31 and September 14, 2026, security firm Netskope identified a tech support scam operating through Google advertisements. The campaign targeted users on 284 websites with fake infection warnings designed to lock browsers.

Why it matters

The scam relies on psychological manipulation, using audio cues and fake alerts to deceive users into calling fraudulent support centers. By encrypting payloads in browser memory, attackers successfully bypassed some security detection methods.

Netskope identified 250 distinct Google Ads campaign IDs across 284 publisher websites. Approximately 62 percent of the targeted organizations were located in the United States, followed by Japan and Australia.

The players

Netskope

Netskope is a cybersecurity firm that tracks and analyzes malicious online advertising campaigns and malware threats.

The details

The scam utilizes full-screen warnings that disable standard browser exit functions on Windows and macOS devices. While the malware mimics infection indicators to alarm users, the process does not actually damage the device and can be bypassed by using the task manager or escape key.

Timeline

  1. The 250 Google Ads campaign IDs were observed from August 31 to September 14, 2026.

The Tech Race

The reliance on the Google Ads platform for this scam highlights the ongoing challenge tech companies face in vetting automated advertising inventory. The campaign demonstrates a departure from traditional malware delivery by exploiting the trust users place in advertisements appearing on legitimate publisher websites.

Users who encounter these fraudulent warnings should avoid calling any displayed phone numbers and instead use the task manager or escape key to close the browser. These scams do not compromise local system files, meaning the threat is primarily focused on social engineering tactics.

The takeaway

Always remain skeptical of unexpected security alerts that appear after clicking an advertisement on a website. If your browser locks up, prioritize closing the application through the operating system rather than engaging with the provided support contacts.

Further reading

For more on evolving digital threats, visit the Cybersecurity section.

Source note: This article includes information reported by RocketNews.

Live Poll

Do you generally trust that advertisements you see on popular websites are safe to click?