The code pulls a malware loader from a Cloudflare Workers domain which, in turn, pulls two ZIP archives. These deploy two payloads, including a StealC infostealer and an auxiliary Python stealer, ...
Adthena has identified the first ads in Google's AI Overviews in the US, while users have started seeing them below the ...