A malvertising campaign named Storm-0408 impacted nearly a million devices, with users downloading malware from GitHub that gave criminals access to login details, OneDrive accounts, and cryptocurrency wallets. The threat posed by such attacks is increasing, with malvertising responsible for 41% of all blocked attacks in Q4 2024. Techniques are evolving, with SEO poisoning now used to insert malware into legitimate search results. Measures to counter such threats include updated antivirus software, use of a VPN, and ad-blockers.

BSI Warns Of New Captcha Scam Spreading Malware
Cybercriminals are exploiting Captchas, symbols of online security, to trick users into downloading malicious software, warns the Bundesamt für Sicherheit und Informationstechnik (BSI). This new