News

Extensive Malvertising Campaign Targets Yahoo!

This Malvertising Campaign is no longer active having been reported to Yahoo by Anti Malware blocker Malwarebytes, it’s still newsworthy to note the stats and techniques which targeted yahoo Ad Network for now and future reference.

According to the following statistics, yahoo and its combined websites has an estimated 6.9 Billion visits per month, which makes this attack one of the biggest targeted attacks seen recently.

  • www.yahoo.com | 6.9B monthly visits
  • news.yahoo.com308.50M monthly visits
  • finance.yahoo.com | 135M monthly visits
  • sports.yahoo.com | 112.50M monthly visits
  • celebrity.yahoo.com | 66.60M monthly visits
  • games.yahoo.com | 43.40M monthly visits

The attack leverages Microsoft Azure websites with the following domains being used,

      trv0-67sc.azurewebsites.net/?=trv0-s4-67sc

  • ch2-34-ia.azurewebsites.net/?ekrug=sewr487giviv93=12dvr4g4

This chain of events leads to the infamous Angler Exploit kit which attempts to exploit known software vulnerabilities within a person’s computer. Think of it like this, your browsing the web for cat pictures, you arrive at a site which contains a malicious link or ad, without clicking on the advert, the tool attempts to find and exploit for example a Flash or another program bug, if it’s successful it will then attempt to compromise said computer. Angler is also known for spreading the rise of Crypto Ransomware which is extremely dangerous. To allow myself a plug, and this is my first one, here’s a link to an article which I have written concerning the Windows 10 Crypto Malware.

Malware within adverts is hugely popular because it does not need the user to click on the ad for the Malware to spread. The nature of the Internet pushes these attacks at a phenomenal rate which exploits the globe. Always update your plug-ins, software, Anti Virus and Windows patches on a regular basis, we all know Flash is about as breakable as a glass hammer. Unless Adobe adapts, it will be remembered in nostalgia circles rather than a current product.

It may be wise to either uninstall or change Adobe Flash’s settings to “Ask to Activate”

Thank You Malwarebytes for providing us with this information.

Christopher Files

Disqus Comments Loading...

Recent Posts

Medieval Kingdom Sim Norland Delayed, Hits Major Wishlist Milestone

A new upcoming Medieval Kingdom SIM game reminiscent of Rim World has just hit a…

8 hours ago

DEEPCOOL MATREXX 30 Tempered Glass MicroATX PC Case

Matrexx 30 is small-sized M-ATX computer case, perfect for gamers looking to build a small…

9 hours ago

Toshiba 10TB Enterprise 3.5″ SATA HDD/Hard Drive 7200rpm

As Big Data drives demand for more distributed storage in the cloud and on premises,…

9 hours ago

PNY NVIDIA GeForce RTX 4060 Ti 8GB XLR8 VERTO EPIC-X RGB Ada Lovelace Graphics Card

NVIDIA® GeForce RTX™ 40 Series GPUs are beyond fast for gamers and creators. They're powered…

9 hours ago

Cooler Master 360mm MasterLiquid 360 Atmos Intel/AMD CPU Liquid Cooler

The next generation AIO liquid cooling is here with the MasterLiquid 360 Atmos. The Atmos…

9 hours ago

Kingston NV2 4TB M.2 NVMe PCIe 4.0 SSD/Solid State Drive

Kingston’s NV2 PCIe 4.0 NVMe SSD is a substantial next-gen storage solution powered by a…

9 hours ago