Cybercriminals are leveraging Google ads to install an infostealer malware (“Atomic”) on macOS and Linux devices via a fake Homebrew website. The malware, sold as a $1,000 per month subscription, steals credentials, browser data and cryptocurrency wallets. The hackers have designed a fake ad that redirects users to a malicious site, brewe.sh instead of the genuine Homebrew site, brew.sh. The Homebrew team has expressed frustration at Google’s lack of action against such scams.

LockBit ransomware group falls victim to hackers itself
A data leak has disclosed information about negotiations with victims, Bitcoin wallet addresses, affiliate accounts, and details of attacks.