Malvertising campaign actively spreading through various verticals and countries

Stay vigilant! There is a sneaky malvertising campaign affecting multiple sectors and company sizes. It works in connection with Qakbot, Emotet, and SmokeLoader to serve as initial access for Blackcat and RansomHouse ransomware, and is likely to be used by other malicious actors as well.

jquery0[.]com
greatbonus[.]life
prizes-for-u[.]life
Winprizenow[.]life
Wingift[.]life
bestwin-for-u[.].life
takeyourpresent[.]life
prizes-for-u[.]life
bestrealprizes[.]life
finddating[.]life
bestwomanenjoy[.].life
hotmeet[.]life
datingdesire[.].life
ecar.allsunstates[.]com
demand.sageyogatherapies[.]com

campaign countries cybersecurity malvertising