News Summary

• Mimecast has tracked 6.4 million detections of Meta Business Manager and Google Ads account theft over four years.
• Age, spending history, verification status and daily spending limits determine the price.
• Mimecast ties activity to Vietnam-linked malware families including DuckTail, NodeStealer, VietCredCare, and PXA Stealer.
• When a compromised ad account keeps running campaigns, the platform earns revenue on every impression served, whether the advertiser is the legitimate owner or an attacker spending stolen budget.