Malicious Activities with Google Tag Manager

If I were to ask if you could trust a script from Google that is loading on your website, the majority of users would say “yes” or even “absolutely”. But when malicious behavior ensues, everything should be double-checked and s… Continue reading Malicious Activities with Google Tag Manager

‘FakeUpdates’ campaign leverages multiple website platforms

Browser update? Do not trust, and do verify before downloading potential malware.
Categories:

Social engineering
Threat analysis

Tags: chromeChtonicfake updatesFakeUpdatesfirefoxflashJoomlamalvertisingmalwareratSquarespacewordpress

(Read mor… Continue reading ‘FakeUpdates’ campaign leverages multiple website platforms

New RIG malvertising campaign uses cryptocurrency theme as decoy

This malvertising campaign uses a popular cryptocurrency theme to redirect users to the RIG exploit kit.
Categories:

Exploits
Threat analysis

Tags: cryptocurrenciesmalvertisingRIGRIGEK

(Read more…)

The post New RIG malvertising campa… Continue reading New RIG malvertising campaign uses cryptocurrency theme as decoy

The state of malicious cryptomining

From malware coin miners to drive-by mining, we review the state of malicious cryptomining in the past few months by looking at the most notable incidents and our own telemetry stats.
Categories:

Cybercrime

Tags: coin minerscoin-haveCoinbasecoi… Continue reading The state of malicious cryptomining

Tech support scammers learn to ‘lock’ Chrome

For Malwarebytes, Jérôme Segura continues to fight the good fight against support scammers by warning us that ‘Tech support scammers find new way to jam Google Chrome‘. (If you saw this when it first appeared, note that it has bee… Continue reading Tech support scammers learn to ‘lock’ Chrome

Safer Internet Day 2018: ad blockers and anti-trackers

Today, on Safer Internet Day, we’re going to look at some of the easiest, fastest, completely free things you can do to have a safer Internet experience. Starting with ad blockers and anti-tracking browser extensions.
Categories:

Privacy
Continue reading Safer Internet Day 2018: ad blockers and anti-trackers

Yes, Virgina, Malicious Advertising Growth in Numbers and Viciousness Is Startling

Dan Goodin, writing at our beloved Ars Technica, reports on the startling large numbers of malicious advertising exploits and the subsequent malevolence of same. Unfortunately, Today’s Must Read.
Permalink
The post Yes, Virgina, Malicious Advertising … Continue reading Yes, Virgina, Malicious Advertising Growth in Numbers and Viciousness Is Startling

RIG EK covertly delivers cryptocurrency miners

Malware peddlers have been quick to react to the cryptocurrency boom and to take advantage of every possible way to make other people and organizations mine coins for them. They trick victims into installing mining software, hijack their CPU’s po… Continue reading RIG EK covertly delivers cryptocurrency miners

RIG exploit kit campaign gets deep into crypto craze

We take a look at a prolific campaign that is focused on the distribution of coin miners via drive-by download attacks. We started to notice larger-than-usual payloads from the RIG exploit kit around November 2017, a trend that has continued more … Continue reading RIG exploit kit campaign gets deep into crypto craze