SourTrade Malvertising Builds Unique Malware Inside Victims’ Browsers to Evade Detection

Cybersecuritynews •Tushar Subhra Dutta • July 24, 2026

SourTrade is a long-running malvertising operation that uses fake ads to lure cryptocurrency users toward convincing copies of trading and exchange platforms. The campaign has been active since late 2024 and has targeted users across Asia-Pacific, Latin America, Africa, Australia, and Great Britain. The attackers impersonate familiar brands, including TradingView, Solana, and Luno, then use […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SourTrade Malvertising Campaign Evades Detection by Building Malware in Browsers SourTrade is a malvertising operation that has been active since late 2024, targeting cryptocurrency users through fake ads that lead to counterfeit trading platforms. The campaign affects users across Asia-Pacific, Latin America, Africa, Australia, and Great Britain. By leveraging browser-based malware assembly, SourTrade circumvents traditional hash-based detection methods. The attackers impersonate well-known brands like TradingView and Solana to lure victims. This operation has reached retail traders and crypto investors in 12 different geographies. Current reports indicate ongoing activity, with no immediate resolution in sight. 9 sources 67

Extracted Entities

SourTrade Malvertising Builds Unique Malware Inside Victims’ Browsers to Evade Detection

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Countries (2)