https://censys.com/lets-look-for-bad-stuff-using-censys-suspicious-open-directory-label/
This case from May 2024 started with a malicious download from a website mimicking the teleconferencing application Zoom. When visiting…