A new phishing threat is targeting Google Merchant Center users. If you attempt to log in by searching for GMC in Google Search, be cautious of a malicious ad that closely imitates the official login page. The fake site is designed to capture user credentials, putting account access and data at risk.
Always verify the URL before entering login details and consider enabling extra security measures, such as two-factor authentication.
It is important to remind teams and colleagues about the growing sophistication of phishing scams targeting advertising platforms. As seen in a recent case where malicious Google Ads redirected Mac users to fake Apple Support pages, attackers are increasingly leveraging trusted domains and verified advertiser status to bypass detection.
This update was spotted by Jaime Carrillo.