Malicious Sites Use JavaScript to Build Malware in Browser Memory
A malvertising campaign uses fake sites to have browsers assemble malware in memory.
A significant malvertising campaign is leveraging fake Solana, Luno, and TradingView pages to instruct browsers to assemble malware directly in memory. Active since late 2024, this operation targets retail traders and crypto investors across 12 countries, primarily in Asia Pacific and Latin America. Researchers highlight the campaign's innovative use of web browsers as a "local assembly pipeline" for malware.
This synthesis was produced from its source by AI; there is no human editor or manual review step. How we work