SourTrade malvertising assembles Windows malware inside victims' browsers

58/100

Confiant describes a SourTrade malvertising operation active since late 2024 that assembles a Windows executable in victims' browsers using the legitimate Bun runtime. The campaign impersonates TradingView, Solana and Luno to target retail traders.