FIN7 Hacker Group Leverages Malicious Google Ads to Deliver NetSupport RAT

**FIN7 malvertising campaign:** FIN7 has been observed using malicious Google Ads and spoofed brand websites to trick victims into downloading signed MSIX installers that run PowerShell payloads to fingerprint systems and fetch NetSupport RAT, with follow-on delivery of loaders like DICELOADER; vendors note the abuse of MSIX to bypass SmartScreen and warn of resulting data-theft and potential extortion/ransomware activity.