Threat actors ride the hype for newly released Arc browser
Essential information
- Published
- 28/05/2024 17:43
- Modified
- 28/05/2024 17:59
- Tags
- 2024-05-28 arc browser infostealer malvertising
- Related entities
- 9 observables, 9 techniques (mitre)
Description
The release of the Arc browser for Windows sparked interest among cyber criminals who quickly launched a malvertising campaign impersonating the new software. The scheme uses Google search ads to lure potential victims with fake Arc installers. These installers employ various techniques, including using the MEGA cloud platform for command and control, embedding code within image files, and retrieving payloads from paste sites. The final payload is likely an information stealer, highlighting the importance of exercising caution when downloading software, even from sponsored results.