One year later, Rhadamanthys is still dropped via malvertising

This report details an ongoing malvertising campaign impersonating legitimate software (e.g., Notion) to deliver droppers that retrieve the Rhadamanthys infostealer and other malware; it includes traffic and landing-page analysis, dropper behavior, IOCs (hashes, IPs, domains, download URLs), observed targeting of business users, and recommended mitigations such as DNS filtering and EDR protections.