Malvertising in Govt, Enterprise Targets Old Software, Macs

guest · Feb 24, 2020

Malvertising in Govt, Enterprise Targets Old Software, Macs
February 24, 2020
https://www.bleepingcomputer.com/ne...in-govt-enterprise-targets-old-software-macs/

A new report on malicious advertising underscores the importance of using modern web browsers and making sure your operating system is up to date with the latest security updates to prevent being infected.

Based on the analysis of 378 million blocked malicious ads over three months between Oct. 15, 2019 - Jan. 15, 2020, Confiant illustrates how companies and government agencies are targeted based on the browsers or operating systems that they use.
Some govt agencies continue to use Internet Explorer
In Confiant's report, they illustrate how both the United States Geological Survey and the United States Postal service are both heavily targeted by malvertising campaigns by Zirconium and Yosec.

For example, Zirconium is known to be heavily targeted at outdated browsers to show tech support scam pages, so it is likely both the USGS and USPS are using outdated browsers.

"Our hypothesis is easily confirmed when we pull reporting by browser — 23% of traffic recorded from the Geological Survey is Internet Explorer, but only 1.6% for the Senate," Confiant states in their report.
Click to expand...

Macs targeted more in Fortune 100 companies
The monitored malvertising campaigns also offer us insight into the types of computers and browsers Fortune 100 companies are using.
In a corporate setting, it is not surprising that we begin to see a much larger percentage of malvertising from the Yosec group who target Mac computers.
Malvertising can lead to a compromised network
With the continued usage of outdated browsers, exploit kits could use vulnerabilities to install malware that allows attackers to gain access to the network.
Click to expand...

Confiant: Exploring The Impact Of Malvertising On Government, ISPs & The Fortune 100

Most of the malvertising disclosures we have done to date have centered around attacker infrastructure, exploits, and IOCs. In this blog post we will explore the threat of malvertising from the other end of the tunnel and look at what organizations are being disproportionately targeted in these attacks as well as which threats they are the most likely to face.
Click to expand...

Log in or Sign up

Malvertising in Govt, Enterprise Targets Old Software, Macs

guest Guest

Log in or Sign up

Malvertising in Govt, Enterprise Targets Old Software, Macs

guest Guest

Useful Searches