TLDR Tech / InfoSec
Hackers Impersonate Ghidra, dnSpy, and SpiderFoot to Spread Malware
Security researchers have recently uncovered a new malvertising campaign that leverages Google Ads to deceive users into downloading malicious versions of popular security software such as Ghidra, dnSpy, and SpiderFoot. The fraudulent download pages are meticulously designed to resemble official sites, even featuring links that appear legitimate but, upon being clicked, dynamically redirect users through a traffic distribution system (TDS). This multi-stage redirection ultimately leads users to a download page for an infostealer, compromising their systems.
Read the full story