Malvertising campaigns come back in full swing

[Gandalf_The_Grey]

Content source

https://blog.malwarebytes.com/social-engineering/2020/09/malvertising-campaigns-come-back-in-full-swing/

Malvertising campaigns leading to exploit kits are nowhere near as common these days. Indeed, a number of threat actors have moved on to other delivery methods instead of relying on drive-by downloads.

However, occasionally we see spikes in activity that are noticeable enough that they highlight a successful run. In late August, we started seeing a Fallout exploit kit campaign distributing the Raccoon Stealer via high-traffic adult sites. Shortly after we reported it to the ad network, the same threat actor came back again using the RIG exploit kit instead.

Then we saw possibly the largest campaign to date on top site from a malvertiser we have tracked for well over a year. This threat actor has managed to abuse practically all adult ad networks but this may be the first time they hit a top publisher.

Still using Internet Explorer?

Threat actors still leveraging exploit kits to deliver malware is one thing, but end users browsing with Internet Explorer is another. Despite recommendations from Microsoft and security professionals, we can only witness that there are still a number of users (consumer and enterprise) worldwide that have yet to migrate to a modern and fully supported browser.

As a result, exploit kit authors are squeezing the last bit of juice from vulnerabilities in Internet Explorer and Flash Player (due to retire for good next year).

Full story from Malwarebytes here:

Malvertising campaigns come back in full swing | Malwarebytes Labs

Threat actors monetize on adult traffic in several large malvertising campaigns.

blog.malwarebytes.com

 

[Cortex]

I can't remember the last time I used IE, I usually remove it after in install anyway.

 

[Gandalf_The_Grey]

I can't remember the last time I used IE, I usually remove it after in install anyway.

I only have it installed on my work laptop.
Still daily needed to access one site.