The number of malicious ad attacks seems to be increasing day by day, with even top websites falling victim to such attacks – YouTube is the latest to be affected by malicious ads.
Security experts from Bromium discovered that cybercriminals were distributing malware through YouTube.
According to researchers, the malicious ads attempt to exploit vulnerabilities in old Java versions. They load a different malicious file to ensure that the exploit is compatible with the installed Java version.
The exploit kit used in this attack, the “Styx Exploit Kit,” was the same one used by cybercriminals to infect users of toy manufacturer Hasbro.com.
If the user's machine has vulnerable plugins, it will exploit the vulnerability and introduce a Banking Trojan known as “Caphaw.” The researchers say they are working with Google's security team.
