Malspam Uses Google DoubleClick to Slip DesckVB RAT Past Defenses
Researchers uncovered a malspam campaign that leverages Google's DoubleClick tracking domain to hide its delivery chain and drop the .NET‑based DesckVB RAT. The lure redirects through DoubleClick before serving a malicious ZIP that installs a loader, evades security tools, and establishes persistent control via process hollowing.