Microsoft has uncovered a massive malvertising campaign by Storm-0408 threat actors that has compromised over one million devices globally. The attack begins on illegal streaming sites, using sophisticated multi-layer redirections to GitHub repositories containing malicious payloads. The f...
A sophisticated phishing campaign targeting Google Ads users has emerged, using malicious advertisements to steal advertiser credentials. The attackers create fake Google Ads that redirect to phishing sites hosted on Google Sites, capturing login credentials and 2FA codes. Once compromised...
A large-scale malvertising campaign dubbed "DeceptionAds" is distributing Lumma Stealer malware through fake CAPTCHA pages, generating over 1M daily ad impressions across 3,000 websites. The attack tricks users into copying malicious PowerShell commands disguised as CAPTCHA solutions, lead...
A sophisticated malvertising campaign "DeceptionAds" exploits legitimate ad networks to distribute malware through 3,000+ content sites, generating 1M+ daily impressions. The attack redirects users from pirated movie sites to fake CAPTCHA pages, deploying information stealers like Lumma th...
