Attackers Abuse Google Ad Feature to Target Slack, Notion Users

**Executive Summary:** Attackers abused Google Ads' ad-tracking feature to display banners for popular collaboration tools (Slack, Notion, Trello, etc.) that redirected users via hidden tracking URLs to malicious landing pages; victims were lured to download Inno Setup/NSIS installers which deployed the Rhadamanthys stealer (injected into %system32%) to exfiltrate browser data and system information, and researchers published associated URLs and IoCs for detection and remediation.