Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A sophisticated malvertising campaign, dubbed SourTrade and linked to Confiant, is using legitimate browser technologies like Bun and a ServiceWorker to build Windows executables for victims, primarily targeting retail traders and cryptocurrency investors. The campaign operates since late 2024, impersonating TradingVie…