[ORGANIZATION]
Heimdal
Featured in 1 tracked story · first seen
Situations
[ACTIVE]
[TECHNOLOGY]
Browser-based malvertising targeting crypto wallets
2 clusters · 6 sources · last updated
Latest: Malvertising campaigns use browsers to install persistent adware and custom malware
The first report (24 July 2026) described the SourTrade operation, active since late 2024, which lures cryptocurrency investors with fake ads for platforms such as Solana, Luno and TradingView. Attackers use a file‑less