Malvertising Campaign SourTrade Uses Browser to Assemble Malware Executable from Pieces
A malvertising operation named SourTrade, active since late 2024, uses victims' browsers to build a Windows executable from components served across multiple…
Tag: SourTrade
Confiant Discovers SourTrade Malvertising Campaign
Confiant, a cybersecurity firm, detailed the SourTrade malvertising campaign on July 23, 2026. The campaign uses victims' browsers to assemble malware executables…
Bun Runtime Used as Base for Malware Assembly
The Bun runtime, a legitimate JavaScript runtime built on Apple's JavaScriptCore engine, is used by the SourTrade malvertising campaign as a base…
StreamSaver.js Used in Earlier SourTrade Activity
StreamSaver.js is an open-source streamed-download library that was used in earlier SourTrade activity tracked through April 30, 2026. The current campaign retains…