Tax-themed Google Ads push rogue ScreenConnect and a kernel-level EDR killer, Huntress warns

Cybercriminals are abusing Google Ads tied to tax-related searches to infect Windows PCs with a stealthy attack chain that ends in a kernel-level tool designed to kill security software, according to Huntress. The campaign has been active since at least January 2026 and targets people searching for W-2 and W-9 forms during tax season. Huntress […] The post Tax-themed Google Ads push rogue ScreenConnect and a kernel-level EDR killer, Huntress warns appeared first on VPN Central.