Huge hacking campaign uses spoofed Ghidra, dnSpy, and SpiderFoot security tools to harvest ad revenue and serve malware (opens in new tab)

The hackers were spoofing security tools to lure people through an ad monetization network that distributed malware.