Google Ads' $400K Security Blind Spot: Year-Long Uniswap Phishing Campaign Undetected

This sophisticated Uniswap phishing attack via Google Ads reveals a critical security gap in major advertising platforms' vetting processes for cryptocurrency services. Attackers deployed AngelFerno drainer malware combined with advanced evasion techniques—punycode URLs, hidden iframes, and traffic interception—to steal over $400,000 while operating openly for more than a year. The incident reflects a broader systemic failure: Google Ads phishing attacks alone stole $1.27 million in March 2026, signaling that this is a persistent, largely uncontrolled threat affecting millions of users seeking legitimate cryptocurrency services.