Malvertising Research

LibreOffice malvertising campaign (01-20-2026)

A malicious ad for LibreOffice

KeePass malvertising campaign (01-11-2026)

An ad for KeePass password manager leads to malware.

DBeaver malvertising campaign (12-23-2025)

An ad for DBeaver (database management tool) leads to malware.

RVTools malvertising campaign (12-21-2025)

An ad for RVTools leads to malware.

Rufus malvertising campaign (12-12-2025)

An ad for Rufus leads to malware.

Microsoft Teams malvertising campaign (12-12-2025)

An ad for Microsoft Teams leads to a signed malicious payload.

Mac users ChatGPT Atlas malvertising campaign (11-22-2025)

An ad for ChatGPT ATlas (agentic browser) targeting Mac users with a stealer.

Mac users Bitwarden malvertising campaign (11-26-2025)

An ad for Bitwarden targeting Mac users with a stealer.

Mac users disk optimization malvertising campaign (11-16-2025)

An ad targeting Mac users with a stealer under the disguise of a command to clear space.

Homebrew malvertising campaign (11-11-2025)

An ad for the open source Homebrew package manager targeting Mac users with a stealer.

Bitwarden malvertising campaign (11-11-2025)

An ad for popular password manager Bitwarden redirects to a malicious download.

CWE-601 in malvertising campaign (11-8-2025)

An Open Redirect vulnerability in the additnow functionality of apis.google.com is being exploited in malvertising campaigns.