
A malicious ad campaign on the Bing search engine was recently discovered that pretends to be the popular VPN service NordVPN, misleading users and tricking them into downloading malware.
Malwarebytes researchers discovered a malicious ad on Bing that looked like a legitimate NordVPN ad. Clicking on the ad redirected users to a fake website impersonating the official NordVPN site. From that site, they could download an installer that purported to install NordVPN, but actually installed a remote access trojan known as SecTopRAT. This Trojan gave attackers remote access to victims’ computers.
This incident highlights the importance of critical thinking when clicking on advertisements and downloading software from the Internet. It is important to always verify the authenticity of websites and download applications only from official sources.