Beware: Malvertising Campaign Hits Nearly a Million Devices

Microsoft warns of a widespread malvertising campaign originating on illegal streaming sites that used embedded redirectors to route victims to tech-support scams and repositories on GitHub (and occasionally Dropbox or Discord) hosting initial malware. The attackers employed a multi-stage, modular info-stealer that collected system information and exfiltrated documents; Microsoft observed the campaign impacting nearly one million devices and recommends security best practices such as multi-factor authentication and security awareness training.