Fake Google Ads Spread Malware Targeting Crypto Wallets

Smart swindlers have started a new wave of cyberattacks, this time they use the appearance of the well-known promotion service Google Ads to spread viruses to cryptocurrency owners.

As revealed by Scam Sniffer, the attackers take advantage of common programs which are for instance Homebrew – package manager for macOS which helps the attackers to gain trust from the users and steal wallet data.

1/7 🚨 SECURITY ALERT: Another case of malicious software distributed via Google Ads, targeting crypto users through fake Homebrew installers.

Attackers are using fake ads to lure victims into downloading malware designed to steal crypto wallet data and drain assets. Here’s how… https://t.co/6DEC0XnrjC pic.twitter.com/vfuKCsECo2

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) January 20, 2025

How The Attack Works

Phishers use identical Google links whereby they design fake Google Ads looking like normal promotion for Homebrew installers. When the user clicks these ads, he is diverted to the fake homepages that are similar to the official Homebrew home page. Once there, users download a malicious program and not the genuine software.

Once executed, the malware specifically targets crypto users by Stealing browser data like Cookies, passwords, and extensions, harvesting crypto wallet files from Electrum, Exodus, Atomic Wallet, and Ledger Live, and inducing users to enter their system password.

The malware also collects system info, keychain data, and Telegram files. The final aim is to steal victims’ money and transferring to the attacker owned accounts

Why These Attacks Are Concerning

Google Ads make such scams more legitimate and people are more likely to fall into them than in other scams that do not incorporate Google Ads. Thieves are taking advantage of users’ confidence in the popular social platforms and instruments to distribute their viruses.

As these attacks grow more advanced, crypto users must take proactive steps to protect themselves:

• Avoid clicking on ads: As much as possible, go straight to the specific site rather than being led there by search engine ads.

• Verify URLs carefully: Be sure that it is the official website you entered and not a fake or look-alike website which could deceive and rip you off.

• Enable security features: Install antivirus and make them aware of firewalls that prevent download of malicious items.

• Use hardware wallets: These give extra protection in that they help you keep your property off the internet.

Source