Listen to the episode
TLDR
Security researchers at Confiant have exposed a large scale malvertising campaign dubbed SourTrade , active since late 2024 and localized in 25 languages. Attackers run ads on social media and search results pointing to convincing fake...
How it works
Security researchers at Confiant have exposed a large scale malvertising campaign dubbed SourTrade , active since late 2024 and localized in 25 languages. Attackers run ads on social media and search results pointing to convincing fake...
Red flags
- Sponsored links for crypto wallets or trading apps promising quick downloads. A landing page that triggers an unexpected executable download instead of opening an app store or official site. The download appears to come from the same site you visited, hiding the real origin of the files. What to do Get crypto and trading software only from the vendor's official website, never from ads or sponsored results. Before running any installer, verify the digital signature and publisher name match the real company. Keep your browser, OS, and antivirus updated, and block or report suspicious crypto ads on the platforms you use
What to do
- 1What to do Get crypto and trading software only from the vendor's official website, never from ads or sponsored results.
- 2Before running any installer, verify the digital signature and publisher name match the real company.
- 3Keep your browser, OS, and antivirus updated, and block or report suspicious crypto ads on the platforms you use.
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/malicious-sites-use-javascript-to-build-malware-in-browser-memory/FAQ
Is SourTrade malvertising uses fake crypto and trading sites to build malware in your browser a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Sponsored links for crypto wallets or trading apps promising quick downloads. A landing page that triggers an unexpected executable download instead of opening an app store or official site. The download appears to come from the same site you visited, hiding the real origin of the files. What to do Get crypto and trading software only from the vendor's official website, never from ads or sponsored results. Before running any installer, verify the digital signature and publisher name match the real company. Keep your browser, OS, and antivirus updated, and block or report suspicious crypto ads on the platforms you use
What should I do first?
What to do Get crypto and trading software only from the vendor's official website, never from ads or sponsored results.; Before running any installer, verify the digital signature and publisher name match the real company.; Keep your browser, OS, and antivirus updated, and block or report suspicious crypto ads on the platforms you use.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.