Malvertising targets everyone. Yes, including you.

With malvertising playing a key role in the initial breach, malicious search engine ads are impersonating software installers—similar to the Microsoft Teams attack mentioned in today’s edition—to drop a backdoor into corporate machines. This underscores the trend of threat actors using trusted applications and platforms to gain an early foothold. In a significant parallel development, Google warned about a dramatic evolution in malware, identifying new strains that use Generative AI models to dynamically rewrite and mutate their code hourly to evade detection. These dual threats—using deceptive advertising for initial access and then deploying AI-enhanced malware—signal a rapidly adapting environment where both human vigilance and advanced defensive tools are increasingly necessary.

AuthorAuthorAuthor

Daniel Masterson, Ai Courtrie Buson & Bard Gee
November 07, 2025

for the week November 2, 2025, 97th edition

☝️ TWA

Malvertising—the practice of injecting malicious code into legitimate online ad networks—is a massive threat to everyday individual users like you. They are not exclusive to big corporations only.

🤷‍♀️ What now?: Check before you click or tap.

Tools: Take 9 seconds before buying into it.

[This is an advertisement.

This is an advertisement.

This is an advertisement.

about this edition and Inside Hexagon

The production of HX Weekly is guided by the news, which necessitates the reiteration of our message. While we have previously cautioned readers about malvertising, this week’s message feels particularly timely. As a team, we believe it is crucial to emphasize the importance of vigilance against deceptive advertisements.

As we transition into November 2025, the year 2026 begins to appear more promising. Join Hexagon Center by ensuring your subscription to HX Weekly as we commence the new year with the launch of innovative programs designed to safeguard individuals from cyber threats and enhance technological capabilities. Visit hexagoncenter.org to explore how you can contribute to our mission and support our endeavors. As we expand our program offerings, we will also seek volunteers to join us in these initiatives.

This is an advertisement.

HOUSEKEEPING

Glossary/Legend:

  • Malvertising - the practice of incorporating malware in online advertisements.

  • pwn - to dominate and defeat (someone or something). Online gamers use "pwn" to describe annihilating an opponent, or owning them. The word came from misspelling "own" by gamers typing quickly and striking the letter P instead of the neighboring letter O.

  • Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.

  • MFA (Multi-factor authentication or 2FA or 2-Factor Authentication) - a multi-step or 2-step account login process that requires users to enter more information than just one.

  • Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.

  • Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.

Spread cybersecurity culture

Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com

Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.

You may reply to this newsletter or email us at
[email protected]

Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.

Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.

DISCLAIMER

Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.

Content of this newsletter is not an official representation of Hexagon Center.

Reply

or to participate.