Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

A sophisticated operation is impersonating popular open-source and freeware tools like Ghidra and dnSpy to lure users to malicious websites via a Traffic Distribution System (TDS). This TDS then delivers malware, including the SessionGate loader, Remus Stealer, and AnimateClipper, designed to steal data and disrupt use…