Credit: The original article is published here.
More than 100 spoofed websites were redirecting users and offering infostealers.
Huge hacking campaign uses spoofed Ghidra, dnSpy, and SpiderFoot security tools to harvest ad revenue and serve malware
![[Aggregator] Downloaded image for imported item #138862](https://kcmicro.com/wp-content/uploads/2026/06/t46ddWCYtDnh4QZZoHnkLU-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #138862")
![[Aggregator] Downloaded image for imported item #138844](https://kcmicro.com/wp-content/uploads/2026/06/6t9Lsf3QWte55CdyiDs97L-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #138844")
![[Aggregator] Downloaded image for imported item #138689](https://kcmicro.com/wp-content/uploads/2026/06/DuSqs7bbX3ES6M7aChuKiK-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #138689")