How your search for PDF converter and Notepad++ can be dangerous
How your search for PDF converter and Notepad++ can be dangerous
A malvertising campaign has been discovered by cybersecurity company Malwarebytes, targeting users searching for PDF converters and Notepad++ on Google. The campaign uses Google Ads to direct users to dangerous landing pages and distribute malicious payloads. The campaign is unique in its ability to fingerprint users and distribute time-sensitive payloads. The payload is downloaded through a fake website that filters out bots and unwanted IP addresses, fingerprinting the system to determine if it is a virtual machine. The final-stage malware establishes a connection to a remote domain and serves follow-on malware.
A malvertising campaign has been discovered by cybersecurity company Malwarebytes, targeting users searching for PDF converters and Notepad++ on Google. The campaign uses Google Ads to direct users to dangerous landing pages and distribute malicious payloads. The campaign is unique in its ability to fingerprint users and distribute time-sensitive payloads. The payload is downloaded through a fake website that filters out bots and unwanted IP addresses, fingerprinting the system to determine if it is a virtual machine. The final-stage malware establishes a connection to a remote domain and serves follow-on malware.
We use cookies to improve your experience on our site and to show you relevant advertising. To find out more, read our updated privacy policy and cookie policy
Through RSS Feeds 
A malvertising campaign has been discovered by cybersecurity company Malwarebytes, targeting users searching for PDF converters and Notepad++ on Google. The campaign uses Google Ads to direct users to dangerous landing pages and distribute malicious payloads. The campaign is unique in its ability to fingerprint users and distribute time-sensitive payloads. The payload is downloaded through a fake website that filters out bots and unwanted IP addresses, fingerprinting the system to determine if it is a virtual machine. The final-stage malware establishes a connection to a remote domain and serves follow-on malware. 
