VERY IMPORTANT

A recent Nitrogen campaign distributed malware via malicious search ads. The threat actors host payloads on compromised WordPress sites and use Python and DLL side-loading to connect to their command and control server. There is an increased use of web-based attacks to deliver ransomware.