Amazon on Friday said it flagged and disrupted what it described as an opportunistic watering hole campaign orchestrated by the Russia-linked APT29 actors as part of their intelligence gathering efforts.
The campaign used “compromised websites to redirect visitors to malicious infrastructure designed to trick users into authorizing attacker-controlled devices through Microsoft’s device code

Cybercriminals Use Fake SEO Sites to Spread TamperedChef Malware via Bogus PDF Editor – WebProNews
Cybercriminals Use Fake SEO Sites to Spread TamperedChef Malware via Bogus PDF Editor WebProNews