Cybersecurity articles tagged #Ad Fraud on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/clickfix-campaign-exploits-polygon-blockchain-for-c2-evasionhttps://runtimerebel.com/blog/clickfix-campaign-exploits-polygon-blockchain-for-c2-evasionThe ClickFix campaign compromises 31 organizations, dynamically updating its C2 server via EtherHiding and the Polygon blockchain.Tue, 01 Sep 2026 19:01:53 GMTClickFixC2 EvasionAd FraudEtherHidingPolygon Blockchainhttps://runtimerebel.com/blog/android-car-head-units-infected-by-moyu-proxy-botnet-malwarehttps://runtimerebel.com/blog/android-car-head-units-infected-by-moyu-proxy-botnet-malwareA supply-chain attack by MoYu Group uses a legitimate update app to infect Android car head units, forming a proxy botnet for ad fraud.Sat, 22 Aug 2026 16:13:49 GMTAndroid MalwareProxy BotnetSupply Chain AttackAd FraudMoYu Grouphttps://runtimerebel.com/blog/android-car-head-unit-malware-spreads-via-built-in-updatershttps://runtimerebel.com/blog/android-car-head-unit-malware-spreads-via-built-in-updatersKaspersky discovered a new malware family targeting Android car head units via DoFun firmware updaters to build an ad fraud and proxy botnet.Sat, 22 Aug 2026 16:13:11 GMTMalwareAndroidAd FraudBotnethttps://runtimerebel.com/blog/fuyao-operation-android-tv-boxes-mimic-phones-hijack-bandwidthhttps://runtimerebel.com/blog/fuyao-operation-android-tv-boxes-mimic-phones-hijack-bandwidthCheap Android TV boxes are pre-installed with Fuyao malware, impersonating phones for ad fraud and turning devices into residential proxy nodes.Fri, 31 Jul 2026 17:41:21 GMTFuyaoAndroid TV BoxAd FraudProxy NetworkZhejiang Fengwo IoT Technology Co LtdSupply Chain CompromiseMobile Impersonationhttps://runtimerebel.com/blog/generic-streaming-sticks-covert-proxy-networks-ad-fraud-exposedhttps://runtimerebel.com/blog/generic-streaming-sticks-covert-proxy-networks-ad-fraud-exposedGeneric TV streaming sticks are being used in a dual-pronged attack: creating a covert proxy network and engaging in extensive ad fraud through spoofed mobile traffic on…Thu, 30 Jul 2026 17:31:49 GMTAd FraudProxy NetworkStreaming DevicesIot SecurityBotnetConsumer Deviceshttps://runtimerebel.com/blog/popa-botnet-linked-to-alarum-technologies-netnut-proxy-servicehttps://runtimerebel.com/blog/popa-botnet-linked-to-alarum-technologies-netnut-proxy-serviceResearchers link the massive Popa Android botnet to NetNut, a residential proxy provider. The botnet exploits millions of TV boxes for fraud and scraping.Fri, 19 Jun 2026 09:47:40 GMTPopa BotnetNetNutAlarum TechnologiesAndroid MalwareResidential ProxyAd Fraudhttps://runtimerebel.com/blog/trapdoor-android-ad-fraud-455-apps-generate-659m-daily-bid-requestshttps://runtimerebel.com/blog/trapdoor-android-ad-fraud-455-apps-generate-659m-daily-bid-requestsResearchers reveal the Trapdoor ad fraud scheme, involving 455 Android apps and 183 C2 domains generating over 600 million daily fraudulent bid requests.Tue, 19 May 2026 20:39:59 GMTAndroidAd FraudTrapdoorHUMAN SatoriMalvertisinghttps://runtimerebel.com/blog/android-17-privacy-overhaul-google-blocks-8-3b-malicious-adshttps://runtimerebel.com/blog/android-17-privacy-overhaul-google-blocks-8-3b-malicious-adsGoogle announces Android 17 privacy updates and Play policy changes after blocking 8.3 billion ads and 24.9 million fraudulent accounts throughout 2025.Fri, 17 Apr 2026 12:27:55 GMTGoogle Ad SafetyAndroid 17Privacy UpdatesAd FraudPlay Policy Updateshttps://runtimerebel.com/blog/pushpaganda-scam-detecting-ai-driven-ad-fraud-in-google-discoverhttps://runtimerebel.com/blog/pushpaganda-scam-detecting-ai-driven-ad-fraud-in-google-discoverResearchers unmask Pushpaganda, a campaign using AI-generated content and SEO poisoning to trick users into enabling malicious browser notifications.Tue, 14 Apr 2026 16:31:22 GMTPushpagandaGoogle DiscoverAd FraudScarewareAi Generated Content