SourTrade Malvertising Builds Unique Malware Inside Victims’ Browsers to Evade Detection

SourTrade is an active, regionally targeted malvertising campaign that impersonates trading and crypto platforms to trick users into downloading per-session Windows executables assembled in the victim’s browser via ServiceWorker and SharedWorker; the report describes cloaking, targeted ad delivery, and evasion techniques and provides multiple SHA-256 hashes and a large set of domains as IoCs.