Collaborate Disseminate
A large-scale malvertising campaign distributing the Lumma infostealer malware via intrusive “ads” leading to fake CAPTCHA pages has been tied by researchers to a threat actor abusing the Monetag ad network. The campaign from the users̵… Continue reading Malvertising on steroids serves Lumma infostealer
It’s not a new technique, but that doesn’t mean that cybercriminals cannot make rich rewards from SEO poisoning.
Read more in my article on the Tripwire State of Security blog. Continue reading Tech support scams leverage Google ads again and again, fleecing unsuspecting internet users
A Facebook malvertising campaign disguised as Bitwarden updates spreads malware, targeting business accounts. Users are tricked into installing… Continue reading Facebook Malvertising Campaign Spreads Malware via Fake Bitwarden
Who doesn’t fancy earning US $2.5 million?
That’s the reward that’s on offer from US authorities for information leading to the arrest and/or conviction of the man who allegedly was a key figure behind the development and distribution of the notorio… Continue reading $2.5 million reward offered for hacker linked to notorious Angler Exploit Kit
Google Search ads that target users looking for Google’s own services lead them to spoofed sites and Microsoft and Apple tech support scams. The fake Google Search ads (Source: Malwarebytes) “In this particular scheme, all web resources use… Continue reading Tech support scammers impersonate Google via malicious search ads
Malicious Google ads are a well known threat, but malvertising can also be found on other popular online destinations such as Facebook, LinkedIn, and YouTube. Case in point: an enduring campaign that aims to infect Facebook users with the SYS01 informa… Continue reading SYS01 info-stealer pushed via Facebook ads, LinkedIn and YouTube posts
An ongoing malvertising campaign is targeting IT administrators looking to download system utilities such as PuTTY (a free SSH and Telnet client) and FileZilla (a free cross-platform FTP application). “We have reported this campaign to Google but… Continue reading IT pros targeted with malicious Google ads for PuTTY, FileZilla
Google continues to struggle with cybercriminals running malicious ads on its search platform to trick people into downloading booby-trapped copies of popular free software applications. The malicious ads, which appear above organic search results and often precede links to legitimate sources of the same software, can make searching for software on Google a dicey affair. Continue reading Using Google Search to Find Software Can Be Risky
Credit card skimming is on the rise for the holiday shopping season, according to Malwarebytes. Online stores are not always as secure as you might think they are, and yet you need to hand over your valuable credit card information in order to buy anyt… Continue reading Online stores may not be as secure as you think
Users using Google to search for and download the KeePass password manager and the Notepad++ text editor may have inadvertently gotten saddled with malware, says Jérôme Segura, Director of Threat Intelligence at Malwarebytes. Malvertising via search en… Continue reading Google ads for KeePass, Notepad++ lead to malware