Operation Poseidon: Spear-Phishing Attacks Abusing Google Ads Redirection Mechanisms

Operation Poseidon is a highly sophisticated spear-phishing campaign attributed to the Konni APT group, which exploits Google Ads redirection mechanisms and compromised WordPress sites to stealthily deliver EndRAT malware via AutoIt scripts, effectively evading traditional security controls and requiring advanced, behavior-based endpoint detection for mitigation.