Malvertising emerges as growing access point for cybercriminals

This report outlines the growing threat of malvertising, detailing large-scale campaigns that redirected users from legitimate sites to malware (including infostealers, backdoors, and ransomware) via fake AI tools, hijacked social pages, and counterfeit installers; it highlights examples such as an operation attributed to UNC6032 and infections involving RedLine and IcedID, explains why common defenses fail (fileless payloads, trusted CDN abuse, session hijacking), and recommends proactive endpoint controls like ringfencing, script and PowerShell restrictions, and real-time auditing.