CuraSec

tag: In-Memory-Malware · 1 items

Plan archived Malvertising campaign assembles malware in browser memory via JS
2026-07-26 · BleepingComputer · source ↗ #malvertising#in-memory-malware#javascript
  • Engineer — Learn: This technique—assembling malware entirely within browser memory via JavaScript—bypasses file-based detection and signals a shift in delivery model worth factoring into client-side defense strategies (CSP hardening, browser isolation). No specific software to patch; no KEV or PoC signals.
  • SOC/IR — Plan: The campaign is described as large-scale and targets users of crypto/trading sites; build or tune EDR behavioral rules for in-browser memory injection and anomalous JS execution patterns this quarter. The summary provides no specific IOCs to hunt on immediately.
  • Leader — Skip