We recently stumbled upon a malvertising incident on a large British newspaper site which we decided to investigate in greater details.
As with many attacks we have found lately, the line between legitimate advertisers and rogue ones is getting finer and finer. Indeed, in many cases ad networks simply cannot tell them apart without actual proof of malicious activity.
As we outlined it in our recent research paper entitled “Operation Fingerprint“, replaying those attacks can be extremely difficult, and without the smoking gun, one cannot simply close a case.
To illustrate this point, we will check out this incident and show that there is a proliferation of rogue advertisers using clever disguises to push booby trapped adverts.
Full Article
