Nitrogen ransomware uses Cobalt Strike and log wiping in targeted attacks on organizations

Threat actors have leveraged the Nitrogen ransomware campaign to target organizations through deceptive malvertising strategies.

Recent investigations have uncovered a disturbingly effective method involving fake software downloads, such as a counterfeit “WinSCP” installer, propagated through malicious ads on platforms like Bing.

One documented case revealed a user searching for “WinSCP download” via Microsoft Edge being redirected from ftp-winscp[.]org to a compromised WordPress site.

Read more at GB Hackers