MEDIUMMalware
Global

Malicious sites use JavaScript to build malware in browser memory

·Source: BleepingComputer

Updated:

Executive Summary

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. [...]

Analysis

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. [...]
Source Attribution

Originally published by BleepingComputer on Jul 25, 2026.

Related Threats

MEDIUMMalware

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching and AI to decode its logic. The post The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version appeared first on Unit 42 .

Unit 42 (Palo Alto)
MEDIUMMalware

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious Interview campaign. The defining aspect of the attack is that bogus macOS software update screen stealthily

The Hacker News
MEDIUMMalware

Cryptohack Roundup: Triple-A, Verus-Ethereum Bridge Exploits

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cryptohack-roundup-triple-a-verus-ethereum-bridge-exploits-image_small-1-a-32374.jpg" align=right hspace=4><b>Also: Hackers Use SparkKitty Malware to Steal Seed Phrases</b><br>This week, Triple-A wallet was compromised and Verus-Ethereum Bridge exploited, hackers used SparkKitty malware to steal seed phrases, fake IRS letters targ

Bank Info Security