Mac users served info-stealer malware through Google ads

Mac users have been targeted by an info-stealer malware distributed through Google ads, marking the second instance in recent months of the ad platform being exploited for malicious purposes. Security firm Malwarebytes discovered ads promoting a Mac version of the Arc browser, leading users to a fake website resembling the real one. The malware, once installed, sends data to a control panel associated with the Poseidon info stealer. This malware boasts features like extracting cryptocurrency wallets and stealing passwords from various sources. The malicious ads were traced back to an advertiser verified by Google, highlighting the challenges in ad network security. Google Ads, like other networks, removes malicious content upon notification but disclaims responsibility for resulting damages. Users are advised to download software from official sources and be cautious of installation instructions that deviate from standard practices. Malwarebytes provides indicators of compromise for potential targets to identify if they have been affected by this malware campaign.