Threat actors are buying ads for malicious websites to trick victims into downloading malware, leading to potential data theft and ransomware. Ads on search engines and social media are utilised due to their wide-ranging controls. Four malware families have been identified in these campaigns: PAPERDROP, PAPERTEAR, DANABOT, and DARKGATE, all of which have unique functions and capabilities.

The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.