Homebrew malvertising campaign (11-11-2025)
- Description:Malicious Google Search ad for Homebrew
- Severity: Medium
- Reporter: Jérôme Segura
- Reported to Google: 11/11/2025
Google Search Ad
Traffic view
Decoy page
Payload
IOCs
| Decoy page | sites[.]google[.]com/view/brewpageapp/brew |
| Payload URL | palymera[.]com/fourk/update |
| Payload SHA256 | dfd92ae11fd7185a03419adcf8cec1c75b18eb7256465da49e46d9a042e263f0 |