As part of what it described as an opportunistic attack intended to steal confidential data, Microsoft revealed details of a massive malvertising campaign that is thought to have affected over a million devices worldwide.
The tech giant is monitoring the activity, which it discovered in early December 2024, under the more general heading Storm-0408, which is a term used to describe a group of threat actors known to disseminate malware that steals information or grants remote access through phishing, search engine optimization (SEO), or malvertising.
According to the Microsoft Threat Intelligence team, the attack started with illicit streaming websites that had malvertising redirectors incorporated in them. The user was then sent to an intermediary website that routed them to GitHub and two other platforms read more about Microsoft Warns of Malvertising Campaign Infecting Over 1 Million Devices Worldwide.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.