Bing malvertising Tier1/Tier2 gateway serving trojanized MSI via /Get?q=

Emiliano Mema@Nosalva

•updated Aug 18, 2026•0•0•2

This rule detects HTTP requests directed towards known malvertising domains that serve trojanized MSI installers. The rule identifies specific suspicious hostnames and a common URL pattern used for payload delivery.