Hackers hijack PornHub ads to infect 'millions'

12 October, 2017, 15:47 | Author: Sammy Rose
  • 13 2017. Capitalizing on spying tools believed to have been developed by the U.S. National Security Agency hackers staged a cyber assault with a

Proofpoint detailed its analysis of the so-called KovCoreG group, well-known for spreading Kovter malware globally via such tactics.

The KovCoreG group targeted users of Pornhub, one of the world's most visited adult website, by deceiving them into installing the Kovtar malware that would appear via malicious pop-up ads when they visited some Pornhub webpages.

"In 2016, Google removed 112m bad ads which aside from malware, included illegal product promotion and misleading ads", he said.

Like other malvertising actors, the KovCoreG group is now focusing on redirecting users to social engineering sites (i.e. fake download), instead of redirecting users to websites hosting exploit kits.

The malware infected the victim's system by masquerading as fake updates for popular browsers including Chrome, Firefox, and Microsoft's Internet Explorer and Edge - as either a "critical" update for the browser itself, or for software such as Adobe Flash.

The redirects surfaced automatically through ads displayed on Pornhub and caused the browser to display a full-page warning that appeared legitimate, researchers said. Force the user has installed, Kovter, malware, fraud advertising on their PC.

Harvey Weinstein: Prosecutors defend lack of action
He has been an advocate for sentencing reform and was one of the loudest voices opposing strong encryption for personal phones. On the tape, when she asks why he touched her breast, Weinstein responds, "I'm used to that" and "I won't do it again".


JPMorgan Q3 Earnings, Revenue Beat; Citigroup To Report
J P Morgan Chase & Co accounts for about 3.7% of Private Wealth Partners LLC's holdings, making the stock its 6th biggest holding. First American Bank increased its position in shares of JPMorgan Chase & Co. (NYSE:JPM) on Tuesday, June 6 with "Hold" rating.


Brokers Add To Their Ratings On Federal Realty Investment Trust (NYSE:FRT)
This is based on a numerical chart where each stock recommendation (Buy, Sell, Hold) is translated into a numerical equivalent. Teachers Retirement Of The State Of Kentucky owns 0.01% invested in Healthcare Realty Trust Inc (NYSE:HR) for 25,290 shares.


Although ad fraud was the name of the game this time, the payload could easily have been changed to infect users with ransomware, or information-stealers, Epstein added.

"The combination of large malvertising campaigns on very high-ranking websites with sophisticated social engineering schemes that convince users to infect themselves means that potential exposure to malware is quite high, reaching millions of web surfers", the researchers wrote in a report of their findings.

A man looks at pornography online, Hanover, Germany, 25 January 2006.

Visitors to adult website PornHub may have been infected by malware after hackers infiltrated the site's advertising supply chain, according to researchers. This popularity makes it even more of a target for hackers. "This has led to an upturn in the number of reputable organizations distributing malvertising".

"It is worth remembering that defenses will be breached periodically no matter, so it's worth investing in threat detection controls so that any compromise can be quickly and reliably detected and thus responded to".

These malvertising campaigns are a popular mechanism for hackers to spread malware and Mark James, a security specialist at IT firm ESET, told The Guardian that Pornhub was a flawless target.

Recommended:

  • Barcelona on the move for Martial

    Barcelona on the move for Martial

    Manchester Evening News claim that the France worldwide is "very content" at United following his barnstorming start to the campaign.
    Helios And Matheson's Stake In MoviePass Is Paying Off

    Helios And Matheson's Stake In MoviePass Is Paying Off

    Movements above 70 are interpreted as indicating overbought conditions; conversely moves underneath 30 notify oversold conditions. For the past 5 years, the company's revenue has grown -11.1%, while the company's earnings per share has grown -4.44%.
    Razer Teases November 1 Smartphone Announcement

    Razer Teases November 1 Smartphone Announcement

    Razer CEO Tan Min Liang has mentioned not too long ago that the company will be unveiling a mobile device by the end of 2017. What is certain is that Razer will be adding its own expertise with gaming hardware to the device.
  • Congress retains Nanded-Waghala civic body

    Congress retains Nanded-Waghala civic body

    The Nanded civic polls is a fierce fight between the ruling Congress, the Bharatiya Janata Party and the Shiv Sena. The AIMIM, which contested the 2012 Nanded Maha Nagar Palika election for the first time, had won 11 seats.
    Oculus Rift is Getting a Permanent Price Cut

    Oculus Rift is Getting a Permanent Price Cut

    Oculus Rift now being offered at $399 with a pair of touch controllers in the United States of America and United Kingdom. The display is a fast-switch LCD screen with a resolution of 2560x1440 pixels, and it comes with integrated headphones.
    Jack Wilshere: 'Arsenal's new shape is similar to the Invincibles'

    Jack Wilshere: 'Arsenal's new shape is similar to the Invincibles'

    I'm enjoying both roles to be honest and looking forward to getting more minutes in both. It's nearly like a No 10 position if you like.
  • Injury boost: Arsenal defender fit to take on Watford

    Injury boost: Arsenal defender fit to take on Watford

    He added: 'The player I expected to lose the least during the break was Mustafi . But he trained on his own and the first signs are positive.
    Astronauts head outside space station for maintenance

    Astronauts head outside space station for maintenance

    Rob Navias, the NASA spokesman, described the latest installation of HD camera as providing "new eyes" to the space station . As the previous camera had aged and was tinting images pink, so it was replaced with a new high definition video camera.
    Violence erupts in Kenya over new election law

    Violence erupts in Kenya over new election law

    Tension between Kenyatta's ruling Jubilee Party and Odinga's opposition party have risen since the initial August election. In Nairobi police briefly used tear gas to disperse protesters who threw stones at passing cars.
  • A Football Star Became the President of Liberia

    A Football Star Became the President of Liberia

    In 2005 George Wea again ran for president , but then remained second in the vote, after Surley. Sirleaf is a United Methodist and the first female head of state in Africa.
    Lufthansa CEO says to sign Air Berlin deal today

    Lufthansa CEO says to sign Air Berlin deal today

    Spohr told the Rheinischen Post he did not believe Lufthansa's deal with Air Berlin would result in higher airfares. The boss of German carrier Lufthansa said he expects to sign a deal today to pick up parts of rival Air Berlin.

    Falcon 9 rocket lifts off with joint satellite for SES, EchoStar

    EchoStar's half of the satellite is designed for television broadcast, government and enterprise communications. This Falcon 9 booster was first used for a cargo mission to the International Space Station in February.


Popular

Control burn canceled. Merced County smoke is all from wildfires, officials say
Individuals most at risk for illness due to smoke in the air include children, seniors and those with respiratory problems. They also spread smoke and airborne particular matter , leading to harmful breathing conditions.

Hurricane Ophelia slowly heads toward Ireland, Azores
The Category 1 storm now poses no threat to land, forecasters said, and no watches or warnings have been issued. Ireland is set to be faced with 120km/h winds early next week as Hurricane Ophelia makes its way towards us.

Google to integrate Duo App to Android by default
The DUo Integration update for other carriers and OEMs will be rolled out by the end of the Year, says Google. The video call option will show in the Call History or Search if your phone app is version 13.0 and up.

Gucci pledges to go fur-free from 2018
Gucci's CEO Marco Bizzarri said: "Being socially responsible is one of Gucci's core values". Going forward there will be a ban on mink, fox, rabbit, karakul lamb and raccoon dog fur.

Contempt of court: ECP issues non-bailable arrest warrants for Imran
Imran and Babar have been embroiled in a legal battle before the ECP and Islamabad High Court for the last three years. In a statement, Khurshid Shah said that Imran should respect government institutions and ensure his appearance in ECP.

Turkey and USA to resolve diplomatic dispute - Turkish Deputy PM
President Donald Trump's administration played a role in the visa decision. Erdogan warned that Turkish-U.S. ties could be further damaged if U.S.

Panama ballboy becomes global hero after hilarious intervention in World Cup game
Goal-line technology, which is not available to CONCACAF competitions as of yet, would have proved that it wasn't a goal easily . However, there has been some dispute over whether the team's first goal crossed the line .

Orders 166 phones and claims refund
The duo, now arrested by Delhi Police, have been identified as Shivam Chopra and his accomplice Sachin Jain, residents of city's Tri Nagar.

EC To Announce Poll Dates For Himachal Pradesh Today, Gujarat Soon
The BJP, led by Narendra Modi , won 116 seats out of total 182 seats and formed the government while INC bagged 60 seats. According to sources, Election Commission will address a press conference at Nirvachan Sadan and announce the dates.

Researchers Wonder Why a Giant Hole Keeps Opening Up in Antarctica
Scientists weren't expecting the polynya to re-appear, and aren't sure why it has resurfaced twice in the past two years. When the warmer water cools, on contact with the frigid temperatures in the atmosphere, it sinks.