Malvertising attack on South African Mail & Guardian website serves Fake AV

South African Mail & Guardian news portal is the latest victim of Malvertising attack.  This is third report on Malvertising attacks targeting top organizations in 2014.

A large number of visitors to the are being served a malicious ad that redirects to malicious page which is hosted in Server in Netherlands, according to Blue Coat, a California based security firm.

The landing page shows a fake malware infection alert saying "Microsoft Antivirus has found critical process activity on Your pc. you need to clean your computer to prevent the system breakage.".

Clicking the "OK" button downloads "setup.exe" file which is nothing other than Fake Antivirus. 

Few days back,  Users of Yahoo ads got redirected to a page hosting Magnitude Exploit kit.  Following that incident, Malicious ads in Daily Motion lead to Fake AV.
Category: / / /

Share this with Your friends: