Malware ads on Google
Archived — this story has rotated out of today’s deck. It is kept here in full.
The gist
Researchers found thousands of deceptive Google ads, with 15 of 24 reported ads ruled non-violating. Google's ad moderation has gaps that let malware-serving ads reach millions.
Background
Cybernews reported that researchers used Google's own AI tools to analyze ads from Google's Ads Transparency Center, uncovering thousands of deceptive ads. They reported a sample of 24 ads to Google, but only 6 were confirmed as violations, while 15 were ruled non-violating, including one that led to a malware-serving domain. This highlights gaps in Google's ad review process.
How it unfolded
- Sep 3, 2026Cybernews published findings that researchers exposed thousands of deceptive ads on Google, with many slipping through moderation.
- Sep 3, 2026DigitalShield reported on Facebook ads using fake Google Play pages to lead users to unlicensed casinos, part of a larger trend of malicious ads.
- Sep 7, 2026The Hacker News detailed JSCeal malware that bypasses Google authentication, spread via malicious ads on Facebook and Google.
Who’s saying what
- Researchers
- Google's moderation has real gaps, as many reported malicious ads are ruled non-violating.
Still unverified
The specific number of deceptive ads reaching millions is based on researcher estimates, not independently verified.