BEWARE: MALICIOUS GOOGLE ADS TRICK WINSCP USERS INTO INSTALLING MALWARE

Summary from the TLDR InfoSec newsletter

Threat actors are using manipulated search results and Google ads using Google's Dynamic Search Ads to trick users into downloading malware instead of legitimate software such as WinSCP. The malicious ads redirect users to a compromised WordPress website, which in turn takes them to an attacker-controlled phishing site.