New Spear

Cybersecuritynews • January 19, 2026

Share: View original

Operation Poseidon uses Google ad tracking links to spread EndRAT malware , bypass filters, in spear-phishing tied to Konni APT.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Targeted Spear-Phishing Campaigns Exploit Google Ads and WhatsApp A spear-phishing campaign is utilizing Google Ads to distribute EndRAT malware, targeting users with remote access trojans. Simultaneously, Israel's National Cyber Directorate issued an alert regarding a separate spear-phishing attack that targets professionals in security and defense, using deceptive WhatsApp messages that lead to fake websites designed to steal personal information. 6 sources 31

Extracted Entities

APT Groups (1)

Attack Types (2)

Malware Phishing

Campaigns (1)

Operation Poseidon

Malware (1)

MITRE ATT&CK (1)

T1566 - Phishing