Jérôme Segura @jeromesegura.com · 30/04/2025Also, this seems like a small feature but much appreciated: 021
Jérôme Segura @jeromesegura.com · 12/04/2025Crooks doing quality control the hard way 😂 console.log("!!!WORKING!!!") #skimming #ecommerce 010
Jérôme Segura @jeromesegura.com · 24/03/2025If you manage #wordpress sites using #managewp, watch out for this #phishing campaign via #googleads. -> menagewp[.]com (ad URL and redirect) -> orion[.]manaqewp[.]com (phishing page) 011
Jérôme Segura @jeromesegura.com · 11/03/2025Scammers are happily abusing multiple platforms at once thanks to lack of controls. Who's going to protect users here? Google? Facebook? 021
Jérôme Segura @jeromesegura.com · 28/02/2025PayPal’s “no-code checkout” abused by scammers www.malwarebytes.com/blog/scams/2... #malvertising #techsupportscams 030
Jérôme Segura @jeromesegura.com · 20/02/2025SecTopRAT bundled in Chrome installer distributed via Google Ads 📖 www.malwarebytes.com/blog/news/20... ⚠️ sites[.]google[.]com/view/gfbtechd/ chrome[.]browser[.]com[.]de/GoogleChrome.exe #malvertising #SecTopRAT 020
Jérôme Segura @jeromesegura.com · 08/02/2025If you are a developer and use #homebrew, beware of this fraudulent ad on Google. ⚠️ Fake site: brewsh[.]org Malicious curl command: hxxps[://]raw[.]brewsh[.]org/Homebrew/install/HEAD/install[.]sh Atomic Stealer (AMOS): www.virustotal.com/gui/file/389... ⚠️ #malvertising #atomicstealer 000
Jérôme Segura @jeromesegura.com · 28/12/2024Malicious Google ad for Virtuals Protocol ⚠️ virtnals[.]com #malvertising 000
Jérôme Segura @jeromesegura.com · 27/12/2024Malicious Google ad for Aerodrome Finance ⚠️ aeroclrome[.]finance #malvertising 010
Jérôme Segura @jeromesegura.com · 22/12/2024Malicious Google ad for #Freecad ⚠️ freecad3dmodeling[.]com freecad3d-download[.]com hxxps[://]3d-digitals[.]org/downloads/guthub/FreeCAD_Setup_2[.]0[.]74_win_x64[.]zip #malvertising 020
Jérôme Segura @jeromesegura.com · 19/12/2024‘Fix It’ social-engineering scheme impersonates several brands www.malwarebytes.com/blog/news/20... 020
Jérôme Segura @jeromesegura.com · 18/12/2024Malicious Google ad for Netflix ⚠️ +1[-]877[-]906[-]4471 #malvertising 000
Jérôme Segura @jeromesegura.com · 18/12/2024Malicious Google ad for onshape 3D ⚠️ onshapeservices[.]com #malvertising 000
Jérôme Segura @jeromesegura.com · 17/12/2024Malicious Google ad for Freecad ⚠️ freecad3design[.]com #malvertising 030
Jérôme Segura @jeromesegura.com · 17/12/2024Malicious Google ad for Rhino 3D ⚠️ rhino3ddev[.]net #malvertising 010
Jérôme Segura @jeromesegura.com · 17/12/2024Malicious Google ad for myNYLGBS ⚠️ bluehome[.]uk essnewyorkplatform[.]com #malvertising 010
Jérôme Segura @jeromesegura.com · 16/12/2024Malicious Google ad for PayPal ⚠️ hxxps[:]//repairsexpert[.]online/services/ #malvertising 010
Jérôme Segura @jeromesegura.com · 16/12/2024Malicious Google ad for Malwarebytes ⚠️ hxxps[://]sites[.]google[.]com/view/dexters-antivirus/home #malvertising 021
Jérôme Segura @jeromesegura.com · 16/12/2024Malicious Google ad for New York Life ⚠️ alicehotels[.]com[.]ng eddutvolkinang[.]com/online/ #malvertising #phishing 010
Jérôme Segura @jeromesegura.com · 16/12/2024Malicious Google ad for Kaiser Permanente ⚠️ bellonasoftware[.]com #malvertising 021
Jérôme Segura @jeromesegura.com · 13/12/2024Malicious Google ad for Grammarly ⚠️ grammarly[.]pc-download[.]live #malvertising 021
Jérôme Segura @jeromesegura.com · 13/12/2024Malicious Google ad for Planner 5D ⚠️ planner5ddevelop[.]com #malvertising 010
Jérôme Segura @jeromesegura.com · 13/12/2024Malicious Google ad for eBay ⚠️ fbdecors[.]online #malvertising 021
Jérôme Segura @jeromesegura.com · 13/12/2024Malicious Google ad for PayPal ⚠️ https[:]//sites[.]google.com/view/pay-pal-helpcustomerservic/ #malvertising 032
Jérôme Segura @jeromesegura.com · 12/12/2024Malicious Google ad for Microsoft ⚠️ hxxps[://]sites[.]google[.]com/view/micrlochus1011/home #malvertising 010
Jérôme Segura @jeromesegura.com · 11/12/2024Malicious Google ad for HP ⚠️ vijtechnologies[.]store/result-page/ 020
Jérôme Segura @jeromesegura.com · 10/12/2024Malicious Google ad for HP ⚠️ Scammers' number: +1[-]844[-]954[-]54O4 #malvertising 010
Jérôme Segura @jeromesegura.com · 10/12/2024Malicious Google ad for eBay ⚠️ Scammers' number: +1[-]888[-]747[-]9547 #malvertising 010
Jérôme Segura @jeromesegura.com · 10/12/2024Malicious Google ad for PayPal ⚠️ hxxps[://]sites[.]google[.]com/view/womens-v-neck-cable/home #malvertising 010
Jérôme Segura @jeromesegura.com · 09/12/2024Malicious Google ad for Onshape 3D ⚠️ onshape3d[.]org 010
Jérôme Segura @jeromesegura.com · 09/12/2024Malicious Google ad for Freecad ⚠️ frecadsolution[.]net #malvertising 030
Jérôme Segura @jeromesegura.com · 08/12/2024Malicious Google ad for Notion ⚠️ notion[.]downloads[.]com[.]pl/ notion[.]downloads[.]com[.]pl/Notion[.]exe #malvertising 010
Jérôme Segura @jeromesegura.com · 08/12/2024Malicious Google ad for Rhino 3D ⚠️ rhino3dblog[.]net recad3dsolutions[.]org/setup/index[.]php calibrebook[.]org/downloads/Installer-8[.]39-win-x64[.]zip #malvertising 010
Jérôme Segura @jeromesegura.com · 08/12/2024Malicious Google ad for Freecad ⚠️ frecad3dsolutions[.]org calibrebook[.]net/downloads/FreeCAD-Installer-4[.]5[.]089-win-x64[.]zip #malvertising 020
Jérôme Segura @jeromesegura.com · 06/12/2024Malicious Google ads for Planner 5D ⚠️ planner5design[.]org planner5design[.]com calibrebook[.]net/downloads/Installer-8.39-win-x64.zip #malvertising 000
Jérôme Segura @jeromesegura.com · 06/12/2024Malicious Google ad for Calibre ebook reader ⚠️ https[:]//calibrebook[.]com/downloads/Calibre-Installer-8.39-win-x64.zip #malvertising 000
Jérôme Segura @jeromesegura.com · 05/12/2024Malicious Google ad for Planner 5D ⚠️ planner5design[.]net calibrebook[.]net/downloads/Installer-8.39-win-x64.zip #malvertising 120
Jérôme Segura @jeromesegura.com · 04/12/2024Malicious Google ad for New York Life Landing page: urlscan.io/result/71763... #malvertising 000
Jérôme Segura @jeromesegura.com · 04/12/2024Malicious Google ad for PayPal Landing page: urlscan.io/result/60c5c... Phone number: +1 (844)[-]439[-]9953 #malvertising 000
Jérôme Segura @jeromesegura.com · 03/12/2024Malicious Google ad for HP Scam number: 1[-]888[-]746[-]7110 #malvertising 010
Jérôme Segura @jeromesegura.com · 02/12/2024Malicious Google ad for HP Scam number: +1 (833)[-]910[-]2664 #malvertising 010
Jérôme Segura @jeromesegura.com · 02/12/2024Malicious Google ad for PayPal Landing page: urlscan.io/result/3e795... Scam number: +1(888)[-]431[-]5284 #malvertising 010
Jérôme Segura @jeromesegura.com · 02/12/2024Malicious Google ad for eBay Ad: urlscan.io/result/87d05... Landing page: urlscan.io/result/86515... Scam number: +1 (888)[-]747[-]9547 #malvertising 010
Jérôme Segura @jeromesegura.com · 02/12/2024Added 'MagicTrick skimmer' CC skimmer rule ⚠️ dynamicstaticfonts[.]com/allgreen.js 🔗 github.com/jeromesegura... #webskimming #mitmproxy #fiddleitm 000
Jérôme Segura @jeromesegura.com · 02/12/2024Malicious Google ad for Rhino 3D rhinoceros-3d[.]net rhinosolutions[.]io/downloads/Rhino3D-Setup-8.36-win-x64.zip #malvertising 000
Jérôme Segura @jeromesegura.com · 30/11/2024Malicious Google ad for Freecad freecadsolutionsllc[.]com #malvertising 110
Jérôme Segura @jeromesegura.com · 29/11/2024Malicious Google ads for HP printer support megadrive[.]solutions geeksprosoftwareprints[.]org select-easy123print[.]com printcaretech[.]com #malvertising 010
Jérôme Segura @jeromesegura.com · 27/11/2024Malicious Google ad for Rhino 3D rhino3dsolutions[.]io Payload: www.virustotal.com/gui/file/eaa... #malvertising 120
Jérôme Segura @jeromesegura.com · 26/11/2024Malicious Google ad for Microsoft microsoft-help-pro-jp-83c0de640147[.]webflow[.]io #malvertising 000
