“Hey, This Isn’t the Right Site!” Distribution of Malware Exploiting Google Ads Tracking

AhnLab SEcurity intelligence Center (ASEC) has recently detected a malware strain being distributed by using the Google Ads tracking feature. The confirmed cases show that the malware is being distributed by disguising itself as an installer for popular groupware such as Notion and Slack. Once the malware is installed and executed, it downloads malicious files and payloads from the attacker’s server. Below is the list of the file names that have been discovered so far.

• Notion_software_x64_.exe


• Slack_software_x64_.exe


• Trello_software_x64_.exe


• GoodNotes_software_x64_32.exe

This …

ads ahnlab asec cases center distributed distribution exploiting feature google google ads groupware hey installer intelligence isn malware malware analysis notion popular security security intelligence slack tracking