Hackers hijack PornHub ads to infect 'millions'

12 October, 2017, 15:47 | Author: Sammy Rose
  • PornHub visitors hit with malware attack via poisoned ads

Proofpoint detailed its analysis of the so-called KovCoreG group, well-known for spreading Kovter malware globally via such tactics.

The KovCoreG group targeted users of Pornhub, one of the world's most visited adult website, by deceiving them into installing the Kovtar malware that would appear via malicious pop-up ads when they visited some Pornhub webpages.

"In 2016, Google removed 112m bad ads which aside from malware, included illegal product promotion and misleading ads", he said.

Like other malvertising actors, the KovCoreG group is now focusing on redirecting users to social engineering sites (i.e. fake download), instead of redirecting users to websites hosting exploit kits.

The malware infected the victim's system by masquerading as fake updates for popular browsers including Chrome, Firefox, and Microsoft's Internet Explorer and Edge - as either a "critical" update for the browser itself, or for software such as Adobe Flash.

The redirects surfaced automatically through ads displayed on Pornhub and caused the browser to display a full-page warning that appeared legitimate, researchers said. Force the user has installed, Kovter, malware, fraud advertising on their PC.

Porsche builds electric Cayman to showcase new EV tech
Looking like a pretty bog-standard pre-718 Cayman, the E-Volution comes with a graphic on the side which says "Turbo Charging". Its battery only lasts about 125 miles between charges, but that's fine, because it's never going into series production.


JPMorgan Q3 Earnings, Revenue Beat; Citigroup To Report
J P Morgan Chase & Co accounts for about 3.7% of Private Wealth Partners LLC's holdings, making the stock its 6th biggest holding. First American Bank increased its position in shares of JPMorgan Chase & Co. (NYSE:JPM) on Tuesday, June 6 with "Hold" rating.


Oculus Rift is Getting a Permanent Price Cut
Oculus Rift now being offered at $399 with a pair of touch controllers in the United States of America and United Kingdom. The display is a fast-switch LCD screen with a resolution of 2560x1440 pixels, and it comes with integrated headphones.


Although ad fraud was the name of the game this time, the payload could easily have been changed to infect users with ransomware, or information-stealers, Epstein added.

"The combination of large malvertising campaigns on very high-ranking websites with sophisticated social engineering schemes that convince users to infect themselves means that potential exposure to malware is quite high, reaching millions of web surfers", the researchers wrote in a report of their findings.

A man looks at pornography online, Hanover, Germany, 25 January 2006.

Visitors to adult website PornHub may have been infected by malware after hackers infiltrated the site's advertising supply chain, according to researchers. This popularity makes it even more of a target for hackers. "This has led to an upturn in the number of reputable organizations distributing malvertising".

"It is worth remembering that defenses will be breached periodically no matter, so it's worth investing in threat detection controls so that any compromise can be quickly and reliably detected and thus responded to".

These malvertising campaigns are a popular mechanism for hackers to spread malware and Mark James, a security specialist at IT firm ESET, told The Guardian that Pornhub was a flawless target.

Recommended:

  • A Football Star Became the President of Liberia

    A Football Star Became the President of Liberia

    In 2005 George Wea again ran for president , but then remained second in the vote, after Surley. Sirleaf is a United Methodist and the first female head of state in Africa.
    Hurricane Ophelia slowly heads toward Ireland, Azores

    Hurricane Ophelia slowly heads toward Ireland, Azores

    The Category 1 storm now poses no threat to land, forecasters said, and no watches or warnings have been issued. Ireland is set to be faced with 120km/h winds early next week as Hurricane Ophelia makes its way towards us.
    Injury boost: Arsenal defender fit to take on Watford

    Injury boost: Arsenal defender fit to take on Watford

    He added: 'The player I expected to lose the least during the break was Mustafi . But he trained on his own and the first signs are positive.
  • Lufthansa CEO says to sign Air Berlin deal today

    Lufthansa CEO says to sign Air Berlin deal today

    Spohr told the Rheinischen Post he did not believe Lufthansa's deal with Air Berlin would result in higher airfares. The boss of German carrier Lufthansa said he expects to sign a deal today to pick up parts of rival Air Berlin.
    Contempt of court: ECP issues non-bailable arrest warrants for Imran

    Contempt of court: ECP issues non-bailable arrest warrants for Imran

    Imran and Babar have been embroiled in a legal battle before the ECP and Islamabad High Court for the last three years. In a statement, Khurshid Shah said that Imran should respect government institutions and ensure his appearance in ECP.
    Turkey and USA  to resolve diplomatic dispute - Turkish Deputy PM

    Turkey and USA to resolve diplomatic dispute - Turkish Deputy PM

    President Donald Trump's administration played a role in the visa decision. Erdogan warned that Turkish-U.S. ties could be further damaged if U.S.
  • Pinnacle Financial Partners Inc. Has $442000 Stake in Adobe Systems Incorporated (ADBE)

    Pinnacle Financial Partners Inc.'s holdings in Adobe Systems were worth $442,000 at the end of the most recent reporting period. Legal General Gp Public Ltd Company holds 0.28% of its portfolio in Adobe Systems Incorporated (NASDAQ:ADBE) for 2.41M shares.
    Astronauts head outside space station for maintenance

    Astronauts head outside space station for maintenance

    Rob Navias, the NASA spokesman, described the latest installation of HD camera as providing "new eyes" to the space station . As the previous camera had aged and was tinting images pink, so it was replaced with a new high definition video camera.

    Falcon 9 rocket lifts off with joint satellite for SES, EchoStar

    EchoStar's half of the satellite is designed for television broadcast, government and enterprise communications. This Falcon 9 booster was first used for a cargo mission to the International Space Station in February.
  • Nokia 9 CAD renders show the smartphone's possible design

    Nokia 9 CAD renders show the smartphone's possible design

    The Nokia 8 features an auxiliary audio port, so we don't see a reason why the company chose to ditch it in the Nokia 9 . OnLeaks has made a decision to render HMD's upcoming flagship and provide us with a better look of what's to come.
    Google will 'permanently remove' Home Mini feature that led to constant recording

    Google will 'permanently remove' Home Mini feature that led to constant recording

    The rationale behind the move is Google giving people "complete peace of mind" when they use Google Home Mini , the company said. Google's Home Mini can be activated by either saying the magical words "OK Google " or long press on the top.
    Amazon announce new waterproof Kindle Oasis

    Amazon announce new waterproof Kindle Oasis

    The regular model is Wi-Fi only and packs 8GB storage, whereas the mid-tier version has 32GB internal memory and costs $280. In Australia, the new Kindle Oasis is available for pre-order online at JB Hi-Fi and Officeworks for AUD $389 from today.


Popular

Control burn canceled. Merced County smoke is all from wildfires, officials say
Individuals most at risk for illness due to smoke in the air include children, seniors and those with respiratory problems. They also spread smoke and airborne particular matter , leading to harmful breathing conditions.

Congress retains Nanded-Waghala civic body
The Nanded civic polls is a fierce fight between the ruling Congress, the Bharatiya Janata Party and the Shiv Sena. The AIMIM, which contested the 2012 Nanded Maha Nagar Palika election for the first time, had won 11 seats.

Harvey Weinstein: Prosecutors defend lack of action
He has been an advocate for sentencing reform and was one of the loudest voices opposing strong encryption for personal phones. On the tape, when she asks why he touched her breast, Weinstein responds, "I'm used to that" and "I won't do it again".

Brokers Add To Their Ratings On Federal Realty Investment Trust (NYSE:FRT)
This is based on a numerical chart where each stock recommendation (Buy, Sell, Hold) is translated into a numerical equivalent. Teachers Retirement Of The State Of Kentucky owns 0.01% invested in Healthcare Realty Trust Inc (NYSE:HR) for 25,290 shares.

Arsenal legend Winterburn: Alexis will star regardless of attitude
Arsenal's Alexis Sanchez will not be going to the World Cup next summer thanks to an eventful final day in qualification. I hope the situation can be turned around.

India's Ashish Nehra set to retire from worldwide cricket, say media reports
Ashish Nehra has created a buzz in media by his announcement that he is retiring from global cricket. Overall, Nehra has 44 Test wickets, 157 ODI wickets and 34 scalps in T20Is.

EC To Announce Poll Dates For Himachal Pradesh Today, Gujarat Soon
The BJP, led by Narendra Modi , won 116 seats out of total 182 seats and formed the government while INC bagged 60 seats. According to sources, Election Commission will address a press conference at Nirvachan Sadan and announce the dates.

Disney's Movies Anywhere launches with five of six studios on board
According to Gilford, customers can also access their library on the new service (Disney Movies Anywhere will be phased out). Anyone who links two or more Google Play accounts to Movies Anywhere will get those films show up in their library.

Violence erupts in Kenya over new election law
Tension between Kenyatta's ruling Jubilee Party and Odinga's opposition party have risen since the initial August election. In Nairobi police briefly used tear gas to disperse protesters who threw stones at passing cars.

Researchers Wonder Why a Giant Hole Keeps Opening Up in Antarctica
Scientists weren't expecting the polynya to re-appear, and aren't sure why it has resurfaced twice in the past two years. When the warmer water cools, on contact with the frigid temperatures in the atmosphere, it sinks.