However, it now appears the these threat actors are distributing AMOS via modified Google Ads that redirect users to landing pages that appear to be genuine, but are in truth a facade to deploy AMOS into the computer of the targets. What is really worrisome is that these Google ads are very convincingly designed, impersonating big brands with apparent ease. It is coming practise for people to blindly click on the ads thinking it will lead them to the right landing page, which again, in this case, are very convincingly created. The moment these ads are clicked, the target is taken to these fake landing pages and when the target interacts with it, the AMOS takes over and before they know it, the target loses critical information.
