THREAT ACTOR IMPERSONATES GOOGLE VIA FAKE AD FOR AUTHENTICATOR

Summary from the TLDR InfoSec newsletter

MalwareBytes detected a malware campaign that used Google ads to pose as a download page for the Google authenticator app. The downloaded file was hosted on GitHub and was actually the DeerStealer infostealer. This post includes screenshots showing how the attacker was able to make the ad look legitimate by registering a verified advertiser profile.