Google Ads agencies and managers across the internet are reporting a sudden rise in sophisticated MCC (My Client Centre) takeover attacks, where scammers send near-identical phishing emails mimicking legitimate Google access invite emails to enter and compromise hundreds of client accounts.
Victims emphasise the almost perfectly identical appearance of these emails, being nearly indistinguishable from real Google messages. However deceptive, the ‘Accept Invitation’ button redirects users to a Google Sites page presenting as a Google login screen, built to harvest credentials. Once credentials are entered, the attacker receives full MCC access.
These fraudulent emails have the ability to bypass two-factor authentication, which is what makes them more sophisticated than ones we’ve seen in the past.
One user reported the full process and what they spotted, with this scam claiming to seek a Google Ads partner, pointing out numerous red flags along the way. Notice how realistic this scam page looks.
Image source: Greystar Apartments PPC Scam – Olly
What impact is it having?
Individuals and agencies reported numerous consequences, including:
Budgets drained: High-budget fraudulent advertisements and campaigns are instantly being sent out.
Malware risks: Fraudulent adverts often link to malicious sites
Operational control lost: Agencies lose access to all clients under their MCC.
What can you do?
Educate teams: Emphasise phishing red flags, especially during times of increased outreach.
Always verify URLs: Google never uses Google Sites for login.
Clear out: Purge any dormant users and unused accounts.
Confirm within MCC: Do not verify access via email; confirm invites from within the MCC.
Check email domains: Be cautious with free email addresses, especially when they claim to come from large companies.
The bottom line
Phishing attempts are becoming increasingly sophisticated by the day, convincing even the savviest of agencies. If an offer is too good to be true, it likely is. By sticking to these guidelines, you will be one step ahead in keeping your organisation safe from threats!
Want to go that step further?
Here at Daffodil IT, we specialise in complete IT support with advanced threat protection, meaning we can stop these threats before they reach you. Take a look at our services or reach out for a chat. No jargon, just honest conversation!
