The malware downloader known as BATLOADER has been observedΒ abusing Google AdsΒ to deliver secondary payloads like Vidar Stealer and Ursnif.
According to cybersecurity companyΒ eSentire, the malicious ads are used to spoof a wide range of legitimate apps and services such as Adobe, OpenAPI's ChatGPT, Spotify, Tableau, and Zoom.
BATLOADER, as the name suggests, is a loader that's responsible for