Dutch news site nu.nl loaded infected advertisements on 05 June 2013

Discussion in 'malware problems & news' started by FanJ, Jun 7, 2013.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
  2. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
  3. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    According to the Fox-IT blog only two malware scanners were detecting it when scanned at VirusTotal at the time of the infection. That doesn't have to mean much, as we know. Settings at VT might be different compared to settings on a particular computer. I do not want to start that discussion again! Anyway, much more scanners at VT seem to detect it now.
     
  4. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
  5. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
  6. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    The Netherlands
    They are aware of this three days old incident.
     
  7. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Since I am obviously not Dutch, Gerard, I was only adding the Nucia site as an option in which to report this issue in assistance to the Original Poster.
    See TOS entry: https://www.wilderssecurity.com/showpost.php?p=72229
    However:This is good to know regardless of age.

     
    Last edited: Jun 8, 2013
  8. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Hey Silj and Gerard,

    I'm sure that you both posted with all good intentions! :)
    And as for me, I know I was a bit late posting it.

    As can be read from the Fox-IT blog, the advertisement at nu.nl was loaded from a provider with compromised OpenX install, and the redirect was serving exploit kit "Sweet Orange Exploit Kit".

    I think I will end my posts in this thread with a link to the official Dutch governmental site National Cyber Security Centre:
    http://www.waarschuwingsdienst.nl/R...-53 Nieuwssite NU.nl verspreidde malware.html
     
  9. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Voila, we have closure.
     
Loading...
Thread Status:
Not open for further replies.