Threat video1:00
ADEX Fraud 2026: iOS Scripts & Phishing: Detection & IOCs
52% of ad fraud schemes used AI-assisted assets as iOS scripts and WhatsApp phishing grew. 9 detection rules, 5 IOCs and a free Splunk SPL rule cover it.
Read the full threat intel for ADEX Fraud 2026: iOS Scripts & Phishing: Detection & IOCs →
Chapters
- 0:00The hookAbout 52% use AI assets.
- 0:05The storyAI brands and cloaking shift tactics.
- 0:11Attack pathReported: cloned brands, cloaking, stolen domains.
- 0:26AttributionNo threat actor is attributed.
- 0:31Indicators of compromiseNo malicious indicators were published.
- 0:37MITRE ATT&CK techniques7 ATT&CK techniques, from resource development to impact.
- 0:42Remediation4 steps now: Block or review ad creatives and landing pages that clone.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00About 52% use AI assets.
0:05AI brands and cloaking shift tactics.
0:08iOS scripts and phishing now lead.
0:12Reported: cloned brands, cloaking, stolen domains.
0:15Malicious scripts and phishing target users.
0:18Bots feed engagement.
0:19Fraud monetised.
0:21Campaigns suspended.
0:26No threat actor is attributed. Confidence: low.
0:31No malicious indicators were published.
0:377 ATT&CK techniques, from resource development to impact.
0:424 steps now: Block or review ad creatives and landing pages that clone.
0:509 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.