Hackers abuse Google ads for GoDaddy ManageWP login phishing

2026-05-07

Guardio Labs uncovered a private AitM phishing framework abusing Google-sponsored results for the 'managewp' query to proxy credentials and 2FA codes through an operator-driven C2 panel.