We have been informed of an apparently targeted attack via a Google ad, trying to lure people looking for GIMP to a malicious download.
See https://www.reddit.com/r/GIMP/comments/ygbr4o/dangerous_google_ad_disguising_itself_as/

The users are taken to a site that has copied the look of https://gimp.org, but the downloads are different.

The GIMP team does not make use of ads on Google or elsewhere.

The attacker(s) seem to be actively monitoring reactions and changed the former approach - linking to a file on dropbox - with a less suspicious approach by now.

Also people reported they registered other domains than the one in the link and malicious ads are still up (at least there were a few dozen minutes ago according to people reporting regularly) even though we reported it to Google this morning (CET).