Microsoft has removed a number of GitHub repositories used in a major malvertising campaign that affected nearly a million devices worldwide. Microsoft’s threat analysts discovered the campaign which involved injecting ads into videos on illegal pirated streaming websites, redirecting users to malicious GitHub repositories. The malware, which collected system information and downloaded additional payloads, was tracked to several threat actors under the umbrella name Storm-0408. Microsoft noted both consumer and enterprise devices across a range of industries were impacted.

Developer guilty of using kill switch to sabotage employer’s systems
A software developer, Davis Lu, has been found guilty of sabotaging his former employer’s systems by installing custom malware and a “kill switch”. After being