malvertising2 articles
Fake OpenAI Codex Ads Are Serving Mac Malware Via Terminal Commands
Cybercriminals are running a malware campaign targeting Mac developers by placing fake sponsored Google ads for OpenAI Codex, directing victims to convincing but fraudulent download pages. Instead of providing an installer, the sites instruct users to run a terminal command that covertly triggers a multi-stage malware infection — a tactic known as "ClickFix" — ultimately deploying what appears to be the AMOS infostealer. A similar fake page impersonating Anthropic's Claude Code was also discovered sharing the same infrastructure, suggesting a broader campaign against developers seeking AI coding tools.
Ransom Cartel Kingpin Gets 16 Years While Half His Crew Remains at Large
Maksim Silnikau, a 40-year-old Belarusian national, was sentenced to 16 years in prison for creating and operating Ransom Cartel, a ransomware-as-a-service operation that targeted at least 18 companies between 2021 and 2023. He built the criminal enterprise by providing locking software, stolen credentials, and an affiliate management system, routing ransom payments through cryptocurrency mixers. A separate federal case in New Jersey related to the Angler Exploit Kit malvertising scheme remains unresolved, with two co-defendants still at large.