Smart Krampus-3PC Malware Targets iPhone Users

guest · Dec 11, 2019

Smart Krampus-3PC Malware Targets iPhone Users
The malware affected 100 different online publishers
December 11, 2019
https://threatpost.com/krampus-3pc-malware-iphone-users/151043/

A malicious web redirect campaign affecting iPhone users has impacted more than 100 publisher websites, including online newspapers and international weekly news magazines.

According to the Media Trust’s Digital Security & Operations (DSO) team, iPhone users visiting any of the impacted websites were redirected in a recent malvertising campaign via a multistage process, to eventually land on a fraudulent popup masquerading as a grocery store reward ad.
Adding insult to injury, if visitors click on the grocery store ad, they are also redirected to a phishing page that prompted them to enter their personal information.

“The malware was able to retrieve not only whatever information users entered but also their phone numbers, which were later used for phishing texts, and cookie IDs,” explained DSO, in a report [PDF] issued on Wednesday.
The attackers – who are of unknown origin, according to the Media Trust – first placed an ad to be distributed via the Adtechstack adtech provider. They then used the platform’s API to insert rogue code.

Online publishers and the adtech companies they work with typically use popular malware blockers to prevent these kinds of compromises; however, Krampus-3PC evaded conventional scanners and blockers via heavy obfuscation, according to the report.
Click to expand...

“Given its level of sophistication, this malware was likely developed by a group rather than an individual,” he told Threatpost. “Using the adtech platform’s API and looking into the cascading style sheet commonly used by iPhones as one of several ways to identify the device are very novel techniques that are harder for threat experts to find, much less replicate.”
Click to expand...

Media Trust: Krampus-3PC: Persistent Malware Using Multiple Techniques Hits Online Readers in Time for the Holidays
(PDF - 1.02 MB): https://mediatrust.com/sites/default/files/2019-12/Krampus-3PC_2019-1211.pdf

Log in or Sign up

Smart Krampus-3PC Malware Targets iPhone Users

guest Guest

Log in or Sign up

Smart Krampus-3PC Malware Targets iPhone Users

guest Guest

Useful Searches