Hackers have reportedly attacked a popular adult website PornHub, and unsuspecting visitors could have their profiles exposed to the general public.
According to researchers, the website was breached by malware after cyber criminals gained access to its advertising supply chain.
The large-scale attack, as reported by internet security experts Proofpoint, “exposed millions of potential victims in the US, Canada, the UK, and Australia.”
Known as malvertising – a portmanteau of “malicious” and “advertising” – the attack saw hackers hijack advertising platforms to deliver fake browser updates for the three most popular Windows browsers.
Read: Hackers Reveal How Donald Trump’s Old Android Phone Can Be Compromised.
Because advertising inventory can appear on high-profile websites, criminals are increasingly attempting to hijack these platforms to inject malware into a large number of victims’ computers.
The sophisticated filtering that ad networks offer to vendors can also be used by cyber criminals to target users running specific software containing vulnerabilities that can be exploited.
The attack affecting PornHub and its advertising network was committed by a group known as KovCoreG, said Proofpoint, which attempted to infect browsers with the Kovter ad fraud malware.
Read: How To Avoid Hackers And Stay Safe Online.
Advertising fraud is so prevalent on the internet that some advertisers only receive $0.01 for every $1 of impressions they pay for, according to independent ad fraud expert Dr Augustine Fou.
The cyber criminals created fake advertisements that would appear as security warnings on the Chrome, Firefox and Edge web browsers – telling users they needed to apply a critical update.
The fake advertisements encouraging users to infect themselves with the Kovter malware “could just as easily have been ransomware, an information stealer, or any other malware”, said Proofpoint.
Read: How Hackers Are Successfully Breaking Into People’s Accounts.
“Regardless, threat actors are following the money and looking to more effective combinations of social engineering, targeting, and pre-filtering to infect new victims at scale,” the company added.
It said that PornHub acted swiftly when notified of the malvertising to protect users.
Leave a Reply to ManjurCancel reply