Nitrogen shelling malware from hacked sites

Nitrogen is a malvertising campaign that lures victims via fake search ads and decoy sites, serving malicious installers hosted on compromised WordPress sites and web shells; attackers use DLL side-loading to launch obfuscated Python payloads that contact C2 and enable post-exploitation activity, with observed ties to ALPHV/BlackCat ransomware.