Zscaler researchers came across multiple phishing websites after searching Google for free livestreams of March Madness, the colloquial name for the annual NCAA Division I basketball tournament. One such site, streamcartel[.]org, contained adware on each of its pages. Whenever a user clicked anywhere on the page or attempted to close one of the malicious ads, a new tab opened and prompted the user to install a fake browser extension.