Malicious Facebook Ads Reach 2.3 Million: UNC6032’s Crafty Cyber Shenanigans Unveiled!
UNC6032 is playing digital whack-a-mole with malicious Facebook ads, reaching over 2.3 million users in the EU alone. With domains popping up faster than a game of whack-a-mole, they’re keeping security teams on their toes. Remember, just because it’s an ad for AI doesn’t mean it’s not a cleverly disguised trap!

Hot Take:
Once again, cybercriminals are proving that the internet is their playground, and we’re just the clueless kids trying to enjoy recess. With malicious ads reaching millions, it’s like a bad episode of ‘Black Mirror,’ where the only thing getting mirrored is our gullibility. Let’s face it, if Facebook and LinkedIn were schools, UNC6032 would be that sneaky kid who keeps sticking gum under the desks and never gets caught!
Key Points:
– Researchers analyzed over 120 malicious Facebook ads, potentially reaching over 2.3 million users in the EU.
– UNC6032 group rotates domains in ads to avoid detection and bans.
– LinkedIn was not spared, with 10 malicious ads reaching up to 250,000 viewers.
– The ads delivered STARKVEIL malware, dropping other malicious payloads like XWORM, FROSTRIFT, and GRIMPULL.
– The campaigns use fake ‘AI websites’ to lure victims, warning users to verify website legitimacy.