VERY IMPORTANT

AhnLab Security Intelligence Center has detected a malware strain disguised as installers for popular groupware applications like Notion and Slack. The malware is distributed through Google Ads tracking, where clicking on ads redirects users to websites that trick them into downloading and executing malicious files. Once executed, the malware fetches payloads from attacker-controlled servers and injects malicious code into legitimate Windows system files to steal private data.