News

Huge hacking campaign uses spoofed Ghidra, dnSpy, and SpiderFoot security tools to harvest ad revenue and serve malware

  • Sead Fadilpašić--TechRadar
  • published date: 2026-06-04 09:53:09 UTC

The hackers were spoofing security tools to lure people through an ad monetization network that distributed malware.

<ul><li>Over 100 spoofed sites mimic trusted security tools</li><li>Campaign serves SessionGate, RemusStealer, AnimateClipper</li><li>Primary goal appears to be traffic monetization</li></ul> A larg… [+2454 chars]