Beware: Fake Semrush Ads Hijack Google Logins in Sneaky Scam!
Security researchers have uncovered a new malvertising campaign that targets Semrush users with fake ads to steal Google account data. The fraudsters lure victims with malicious ads, leading to a deceptive Semrush login page. With 117,000 Semrush customers, including 40% of Fortune 500 companies, this campaign is a prime target for scammers.

Hot Take:
Who knew that clicking on a seemingly innocent ad could lead you down the rabbit hole of cybersecurity doom? That’s right, folks, the only thing scarier than your Google search history being exposed is your Semrush account being hijacked by a malvertising campaign! So next time you’re tempted by those enticing ads, remember: not all that glitters is gold, and not every “Log in with Google” is the real deal.
Key Points:
- Cybercriminals are using fake Semrush ads to steal Google account logins.
- The malicious campaign targets users with high-value Google accounts linked to Semrush.
- Compromised data includes Google Analytics and Google Search Console information.
- Fraudsters could impersonate businesses to exploit sensitive billing information.
- Semrush is a prime target due to its large customer base, including Fortune 500 companies.
