1 story taggedCastleStealer.
Elastic Security Labs links the malvertising chain to a likely Russian-speaking, financially motivated operator.