Porn site users targeted with malicious ads redirecting to exploit kits, malware

guest · Sep 11, 2020

Porn site users targeted with malicious ads redirecting to exploit kits, malware
Adult ad networks abused in last hurrah attacks before Flash and IE near EOL
September 11, 2020
https://www.zdnet.com/article/porn-...ious-ads-redirecting-to-exploit-kits-malware/

A cybercrime group has been busy over the past months placing malicious ads on adult-themed websites in order to redirect users to exploit kits and infect them with malware.

Named Malsmoke, the group has operated on a scale far above similar other cybercrime operations and has abused "practically all adult ad networks."
The role of the group's malicious ads was to use JavaScript trickery and redirect users from the adult portal to a malicious site that was hosting an exploit kit.
Click to expand...

Most exploit kits are built around vulnerabilities in Flash and IE, which has made them less efficient as most internet users have now either uninstalled Flash or moved to Chrome and Firefox.

"Despite recommendations from Microsoft and security professionals, we can only witness that there are still a number of users (consumer and enterprise) worldwide that have yet to migrate to a modern and fully supported browser," Malwarebytes said in a report published earlier this week.
"As a result, exploit kit authors are squeezing the last bit of juice from vulnerabilities in Internet Explorer and Flash Player."
Click to expand...

Malwarebytes: Malvertising campaigns come back in full swing

Malvertising campaigns leading to exploit kits are nowhere near as common these days. Indeed, a number of threat actors have moved on to other delivery methods instead of relying on drive-by downloads.

Then we saw possibly the largest campaign to date on top site xhamster[.]com from a malvertiser we have tracked for well over a year. This threat actor has managed to abuse practically all adult ad networks but this may be the first time they hit a top publisher.
Click to expand...

Rasheed187 · Sep 12, 2020

Seriously this is so boring, once again they are trying to exploit IE. So seems like hackers have got a difficult time trying to exploit Chromium based browsers and Firefox. And ad-blockers also play a big role of course.

guest · Nov 16, 2020

Attackers Target Porn Site Goers in ‘Malsmoke’ Zloader Attack
A fake Java update found on various porn sites actually downloads the well-known Zloader malware
November 16, 2020
https://threatpost.com/attackers-porn-malsmoke-zloader-attack/161277/

Cybercriminals are tricking adult website visitors – including sites such as bravoporn[.]com and hamster[.]com – in malvertising attacks that redirect victims to malicious websites serving up malware.

The campaign, which is part of a larger malvertising effort dubbed “malsmoke”, has been tracked throughout 2020. The most recent efforts, researchers say, indicate a shift in strategy by the attackers – moving away from pushing victims to sites hosting exploit kits to popping up fake Java updates.
However, starting in mid-October, attackers updated their exploit kits with a twist.

“While we thought the threat actor had gone silent, they simply changed tactics in order to further grow their operations,” said researchers with Malwarebytes in a Monday analysis. “Instead of targeting a small fraction of visitors to adult sites that were still running Internet Explorer, they’ve now extended their reach to all browsers.”
Click to expand...

“Malsmoke goes for high traffic adult portals, hoping to yield the maximum number of infections. For example, malsmoke has been present on xhamster[.]com, a site with 974 million monthly visits, on and off for months.”
Click to expand...

Malwarebytes: Malsmoke operators abandon exploit kits in favor of social engineering scheme

And, in September, we put out a blog post detailing a surge in malvertising via adult websites. One of those campaigns we dubbed ‘malsmoke’ had been active since the beginning of the year.

In the absence of high value software vulnerabilities and exploits, social engineering is an excellent option as it is cost effective and reliable. As far as web threats go, such schemes are here to stay for the foreseeable future.
Click to expand...

Log in or Sign up

Porn site users targeted with malicious ads redirecting to exploit kits, malware

guest Guest

Rasheed187 Registered Member

guest Guest

Log in or Sign up

Porn site users targeted with malicious ads redirecting to exploit kits, malware

guest Guest

Rasheed187 Registered Member

guest Guest

Useful Searches