A new phishing attack is targeting users of Google AdWords, intending to steal sensitive and confidential financial information.
Research released by security vendor Trend Micro suggests the attack begins with an email claiming that payment hasn't been successful and that the user needs to update their payment information, complete with a link to sign in.
The link displayed is the legitimate one, but clicking on it will send you to a unrelated compromised website which is hosted across different countries including Brazil, Romania and Canada.
Once you get to the fake website, which looks similar to the real AdWords web pages, you are prompted to type in your AdWords name and password (even though any combination would work).
