Unit 42

@unit42_intel · Twitter · 2026-09-11 20:36 UTC

We tracked a cybercrime pay per install network reaching enterprise endpoints by targeting young gamers on YouTube and corporate users via SEO poisoning. A single custom loader deployed multiple malware strains across networks: https://bit.ly/4r6F7Ew