GOOGLE ADS FOR FAKE HOMEBREW, LOGMEIN SITES PUSH INFOSTEALERS

Summary from the TLDR InfoSec newsletter

Researchers at threat hunting company Hunt.io have uncovered a new malware campaign that uses ClickFix tactics and impersonates popular software to distribute malware. The campaign uses Google Ads to impersonate software like Homebrew, LogMeIn, and TradingView and requests users to copy commands they run in Terminal. The malware then downloads either Odyssey or AMOS infostealers to harvest credentials.