GOOGLE ADS USED TO SPREAD TROJAN DISGUISED AS TRADINGVIEW PREMIUM

Summary from the TLDR InfoSec newsletter

A malicious advertising campaign offering "free access" to TradingView Premium has expanded from Facebook to Google Ads and YouTube, using over 500 website addresses and hijacking verified business accounts to spread the Trojan.Agent.GOSL spyware. The scammers take control of legitimate YouTube channels, delete the original content, and rebrand them to mimic the official TradingView page, using unlisted videos and paid advertising to avoid detection. The malware is designed to steal sensitive information, including passwords, personal data, and cryptocurrency wallet details. One fake video gathered over 182,000 views in just a few days.