September 14-20, 2020

Assessment:  New forceful redirect campaign drives both desktop and mobile users to download a MacClean booster software which itself is an adware/malware program. Fraudsters achieve this redirect by using known malicious domains and malicious javascript in the ad code which automatically redirects the end users to download malware. 

Malicious landing page TLDs

  • maccleanbooster[dot]com
  • sharpguard[dot]club
  • productresearch[dot]club

Campaign creative & landing page

`` `` ``