Malvertising network targeting AnyDesk delivered a weaponized installer via rogue Google ads. Cybersecurity firm Crowdstrike says 40% of clicks on the malicious ad turned into installations of the AnyDesk binary. AnyDesk’s remote desktop access solution has been downloaded by more than 300 million users worldwide. The fraudulent ad result, when clicked, redirects users to a social engineering page that’s a clone of the legitimate AnyDesk website. Crowdstrike: “This malicious use of Google Ads is an effective and clever way to get mass deployment of shells”
Source: https://thehackernews.com/2021/05/malvertising-campaign-on-google.html