Threat actors are using manipulated Google search results and malicious ads to trick users into downloading malware disguised as legitimate software such as WinSCP. The cybercriminals leverage Google’s Dynamic Search Ads to serve the malware-infected ads, which direct users to a phishing site where they download the malware. Cybersecurity company Securonix, which is tracking the activity, states that the geoblocking used suggests US users are the main targets.
Software firm Blue Yonder providing services to US and UK stores, including Starbucks, hit by ransomware attack
Blue Yonder, a supply chain software provider, experienced a ransomware attack which disrupted its services, affecting clients such as Starbucks and UK grocery chain Sainsbury.