BUGS

Drive-by download campaign targets Chinese websites, experiments with exploits

Unusual Exploit Kit Targets Chinese Users (Part 2)

June 12, 2015

Recently, our researchers identified a strange exploit kit targeting Chinese domains. In that writeup, we talked about how the exploit kit…

Unusual Exploit Kit Targets Chinese Users (Part 1)

Unusual Exploit Kit Targets Chinese Users (Part 1)

May 28, 2015

We are very accustomed to seeing the same exploit kits over and over. Angler EK, Nuclear EK or Fiesta EK all…

Angler Exploit Kit Gives Up on Malwarebytes Users

Angler Exploit Kit Gives Up on Malwarebytes Users

May 19, 2015

It is a well-known fact that malware authors try really hard to avoid security researchers and their analysis tools. For instance,…

'Payload tested' browser popup via AOL's ad network causes a scare

‘Payload tested’ browser popup via AOL’s ad network causes a scare

May 13, 2015

Today, we are looking at a strange case and a potential malvertising issue that appeared on popular news website salon.com but probably…

Large Number of Adult Sites Distribute Malware Via AdXpansion Malvertising

Malvertising strikes on dozens of top adult sites

May 7, 2015

We have been observing a very large malvertising campaign affecting dozens of top adult sites over the past week. All these…

MBAE

Fiesta EK Wreaks Havoc on Popular Torrent Site

May 4, 2015

Downloading music and movies from Torrent sites seems to be more and more difficult these days.Beside the illegal nature of the…

A look back at the Zyns iframer campaign

Domain Shadowing With a Twist

April 29, 2015

We’ve covered malvertising and exploits a fair amount on this blog and cyber criminals’ different techniques meant to evade detection and fuel…

Malvertising Strikes on Adult Site xHamster Again

Malvertising Strikes on Adult Site xHamster Again

April 27, 2015

We identified a malvertising campaign taking place on adult site xHamster (Alexa rank #68, est. 514 million visitors/month according to SimilarWeb) that abused ad…

DMA Locker Strikes Back

Tech Brief: An inside view of a zero-day campaign

April 21, 2015

OverviewDiscovering a new vulnerability in a popular piece of software is the Holy Grail for cybercriminals. The period between this vulnerability…