Ads are everywhere. They generate revenue for site owners and can present related content to the website being visited. As detailed in previous articles, bad actors often take advantage of that functionality. Quite often rogue ad networks will be used to pull down malicious content, but recently we’ve seen a campaign where the threat actors are utilizing popular services like Github and Bitbucket to store their rogue ad sources.
The injection
WordPress and other CMS will often utilize plugins to insert header content directly from the admin panel, making it easy for developers and non-developers alike to add functionality to their sites.
Continue reading Rogue Ads Redirect Visitors at Sucuri Blog.
Related posts:
Analyzing a Malicious Advanced IP Scanner Google Ad Redirection | Huntress
Combating Emerging Microsoft 365 Tradecraft: Initial Access | Huntress
SelectBlinds says 200,000 customers impacted after hackers embed malware on site
Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs
Leave a Reply