Instagram Ads Are Quietly Dropping Spyware on iPhones — No Tap Required
Researchers at iVerify and Report URI have traced a live malvertising operation that used a World Cup-themed Instagram ad to plant iOS spyware on a victim's phone without...
AdFection Campaign Used Online Ads to Deliver Zero-Click Spyware
Citizen Lab researchers have documented AdFection, a zero-click delivery method that used advertising infrastructure to target devices with Candiru-linked spyware. At least 45 Al Jazeera devices were targeted,...
Malvertising Has Moved Past the Ad Itself: Why the Real Threat Now Lives in the Redirect Chain
New moderation data shows malicious advertising is increasingly indistinguishable from a legitimate ad at first glance, with the real payload hidden several redirects deep behind cloaking, disposable domains,...
Fake Claude Desktop Ads on Bing Are Delivering SectopRAT to Corporate Networks
A campaign dubbed FakeAgent used paid Bing search ads and a malicious public Claude Artifact to trick corporate employees into installing a disguised remote access trojan. At least...
InstallFix: Hackers Use Fake Claude AI Installer Pages and Google Ads to Deploy RedLine Stealer Malware
A malware campaign called InstallFix is using paid Google Ads to push fake Claude AI installation pages to the top of search results, tricking users into running malicious...