Guardio Labs has warned that a Vietnamese threat actor is behind a ‘malverposting’ campaign which has infected over 500,000 devices worldwide over the last 3 months. ‘Malverposting’ uses promoted social media posts on services like Facebook and Twitter to mass propagate malicious (information stealing) software and other security threats, such as the S1deload Stealer and SYS01stealer. The advice is to exercise caution with promoted social media posts and to keep antivirus, software updates, and patches up to date.