Microsoft has disclosed details of a massive malvertising campaign that is estimated to have affected more than a million devices worldwide in what it says is an opportunistic attack aimed at stealing sensitive information.
The tech giant, which discovered the activity in early December 2024, is tracking it under the broader Storm-0408 umbrella, which is used to refer to a group of threats known to spread remote access or steal information through phishing, search engine optimization (SEO), or malvertising. “The attack originated from illegal streaming sites equipped with malicious ad redirects that led to an intermediary site where the user was redirected to GitHub and two other platforms”, the Microsoft Threat Intelligence team said.
“The campaign affected a wide range of organizations and industries, including both consumer and enterprise devices, highlighting the indiscriminate nature of the attack”.
