Hackers Use 1Campaign to Hide Malicious Ads From Google Reviewers

Varonis Threat Labs reveals 1Campaign, a platform used to trick Google Ads and hide phishing pages. Learn how this cloaking tool targets real users while evading security.

Cybersecurity researchers at Varonis Threat Labs have identified a new platform named 1Campaign, designed specifically to help hackers and scammers trick Google’s security systems, or at least attempt to do so.

This service allows criminals to run fraudulent advertisements that stay online for much longer than usual by hiding their true intent from safety checkers. The platform has been active for over three years, managed by a developer known as DuppyMeister, who even provides dedicated help desk support for users.

How It Works

The main feature of 1Campaign is a technique called cloaking. This involves showing two different versions of a website. When a Google reviewer or a security bot checks the link, they see a perfectly safe white page. However, when ...