Yes, the "trick" is ultra-simple: to fool Google, the scammers host the initial malicious code on the sites.google.com subdomain, allowing them to display the o

Yes, the "trick" is ultra-simple: to fool Google, the scammers host the initial malicious code on the sites.google.com subdomain, allowing them to display the official ads.google.com subdomain... peek irony if you ask me! :) Google didn't care until now. We reported hundreds of ads. I hope this content will push them to react. But there's another problem we've noticed in the past 24 hours: major legit ad accounts are being compromised.