huntress

Searching for Tax Forms? Malicious Google Ads Want to Kill Your Antivirus First

John Z Black Mar 25, 2026

Threat Intelligence #malvertising #byovd #screenconnect #edr #tax-season #endpoint-security #huntress

A malvertising campaign running since January targets W2 and W9 searchers with a kill chain that disables endpoint security at the kernel level before installing remote access malware. Your antivirus can't stop it once it's running.