Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
ars ·
Security researchers from Netskope have identified a sophisticated tech support scam delivered through Google ads that freezes the screens of both Windows and Mac devices. These malicious advertisements appear across high-traffic websites, including maps, weather services, and sports sites, tricking users into believing their systems are infected. Upon clicking, the ad triggers a full-screen locker that disables standard exit keys and mimics system lag to pressure victims into calling a bogus call center. The scamware is designed to be stealthy by encrypting its code and only decrypting it in browser memory, which helps it evade detection by endpoint security tools and ad filters. Although Google stated it has zero tolerance for such scams and is investigating the campaigns, the company did not specify why its scanners initially missed this activity. Experts emphasize that while the devices are not actually locked, many users lack the technical knowledge to recognize the deception. To escape the scam, users can force the browser out of full-screen mode by holding the Escape key or using task manager shortcuts specific to their operating system.
ars