{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreicb6tsrpfmsjmhw5mvdastzu2dbn3i5dzjjz6245mhu323m5aff6a",
    "uri": "at://did:plc:ghkvexthfanuyq7fb5veq6tw/app.bsky.feed.post/3mht6ceebsns2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreibjrbsxuoknzw53x5uh4e66dxu367s3pttpjpngsiddhnd52adp5e"
    },
    "mimeType": "image/jpeg",
    "size": 437329
  },
  "path": "/2026/03/tax-search-ads-deliver-screenconnect.html",
  "publishedAt": "2026-03-24T17:05:00.000Z",
  "site": "https://thehackernews.com",
  "textContent": "A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind security programs using the bring your own vulnerable driver (BYOVD) technique.\n\"The campaign abuses Google Ads to serve rogue ScreenConnect (",
  "title": "Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR"
}