
Cybercriminals Exploit Google's Gemini to Launch US Cyber Assaults
February 2025
Recent reports reveal that cyberattackers are exploiting Google's advertising platform, Gemini, for their malicious activities. The attacks are particularly targeting the United States. Gemini, an automated advertising platform, allows users to run ads on Google's search pages.
According to cybersecurity firm Symantec, hackers have managed to circumvent Gemini's security measures to disseminate malicious programs. The attackers utilize a technique known as 'malvertising', where they embed harmful code within seemingly innocuous advertisements.
The cybercriminals' modus operandi involves creating a fake tech company that appears legitimate. They then purchase ad space through Gemini, which they use to run their malicious ads. Unwitting users who click on these ads are redirected to infected websites that install malware onto their systems. The malware then steals sensitive data from the victims' devices.
The victims of these cyberattacks are not limited to individual users. Large organizations, including defense contractors and technology companies, have also fallen prey to these attacks. Symantec has identified several such victims, although the actual number is likely much higher.
The cybersecurity firm believes that the attackers are part of a notorious group known as 'Waterbug' or 'Turla'. This group, believed to be Russian, is notorious for its sophisticated cyberattacks and espionage activities. The group has a history of targeting institutions in the US.
Although Google has taken steps to improve Gemini's security, the platform's automated nature makes it difficult to completely prevent such attacks. The tech giant has, however, declared that it will continue to work hard to enhance Gemini's security and protect users from malicious attacks.