malware · Sat 25 Jul 2026 · 18:50 UTC
RT by @TheHackersNews: The malware arrives in pieces. The victim’s browser puts it together. SourTrade malvertising delivers a legitimate Bun runtime, malicious bytecode, and PE components separately, then uses the browser to build the final Windows executable with a different hash each session. See how the browser-assembled malware chain works: https://thehackernews.com/2026/07/malvertising-sends-malware-in-pieces.html
Filed UTCSource X ↗
<p>🚨 The malware arrives in pieces. The victim’s browser puts it together.<br /> <br /> SourTrade malvertising delivers a legitimate Bun runtime, malicious bytecode, and PE components separately, then uses the browser to build the final Windows executable with a different hash each session.<br /> <br /> See how the browser-assembled malware chain works: <a href="https://thehackernews.com/2026/07/malvertising-sends-malware-in-pieces.html">thehackernews.com/2026/07/ma…</a></p> <img src="https://nitter.net/pic/media%2FHOGD5kSawAAqLCY.jpg" />…
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.