THREATOPS

THREAT OPS › Threat News › Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

lowthehackernewsPublished 2026-07-25

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL.

Confiant, which detailed the campaign on July 23, 2026, said it has operated since late 2024 and impersonated TradingView, Solana, and Luno to target retail traders and

MITRE ATT&CK techniques

MalvertisingT1583.008
Malicious FileT1204.002

Original source: https://thehackernews.com/2026/07/malvertising-sends-malware-in-pieces.html