Imagine searching for Microsoft Teams, seeing a text link at the top of the results, visiting it, and then getting hit with malware. The Rhysida ransomware gang, an especially insidious criminal organization that has stolen millions of people's info, has been placing fake ads for Microsoft Teams in search engines and then infecting victims who make the mistake of clicking them.

"We're tracking Rhysida's current campaign leveraging malicious advertisements to deliver OysterLoader malware (also known as Broomstick and CleanUpLoader)," Expel threat intel analyst Aaron Walton said in a Friday blog. According to the managed detection and response firm, the OysterLoader campaign began in June and remains ongoing.

"We've seen new advertisements, new domains, and new malware as recently as this

See Full Page