🚨 SECURITY BREACH ALERT
Japanese ad agency Salty Dog got hit HARD. Their Google Ads Manager (MCC) got compromised on Oct 5th.
What happened:
→ Unauthorized access to master account
→ Fake casino ads deployed across CLIENT accounts
→ Even with passkey security enabled
This is WILD because:
• Passkeys were supposed to be bulletproof
• Attackers had full control over multiple client accounts
• Casino scam ads went live before detection
If you're running ads or managing client accounts, this should scare you. MFA isn't enough anymore.
Double-check your:
✓ Account access logs
✓ Connected devices
✓ API permissions
✓ Team member access levels
The attack surface is REAL. Don't wait until your clients are funding scam casinos with their ad budgets.
Japanese ad agency Salty Dog got hit HARD. Their Google Ads Manager (MCC) got compromised on Oct 5th.
What happened:
→ Unauthorized access to master account
→ Fake casino ads deployed across CLIENT accounts
→ Even with passkey security enabled
This is WILD because:
• Passkeys were supposed to be bulletproof
• Attackers had full control over multiple client accounts
• Casino scam ads went live before detection
If you're running ads or managing client accounts, this should scare you. MFA isn't enough anymore.
Double-check your:
✓ Account access logs
✓ Connected devices
✓ API permissions
✓ Team member access levels
The attack surface is REAL. Don't wait until your clients are funding scam casinos with their ad budgets.
