Deceptive download sites display genuine links but redirect users elsewhere

A network of 41 websites was identified impersonating popular games and Windows software while directing visitors to a Download Studio installer instead of the advertised application. The sites could display a genuine destination when users hovered over a link, then use JavaScript to change the navigation after the click. The source did not establish that Download Studio itself was malware in this campaign.