Cybersecurity researchers have identified a new threat called OXLOADER, a malicious loader being distributed through fraudulent Google ads to deploy CastleStealer malware. The campaign demonstrates how attackers continue to exploit trusted advertising platforms to compromise systems. This discovery highlights the ongoing challenge of malvertising as a delivery mechanism for credential-stealing malware.