Security analysts from FireEye have uncovered a new Malvertising campaign targeting the popular news site Forbes.com.
The malvertising campaign was discovered earlier this month, according to analysis published by FireEye, with attackers exploiting the popular news website Forbes.com to redirect its visitors to pages hosting the malicious Neutrino and Angler exploit kits.
The analysts discovered the Malvertising campaign, which exploited a third-party advertising service, and the redirects were made from a limited number of old articles. When the article was loaded on Forbes.com, the third-party advertising service was recalled and in its place was loaded . This iFrame is used for all the dirty work, redirecting the user to the chosen exploit kit.
FireEye reports that the Neutrino kit was the primary choice of the attackers behind the Malvertising campaign, but it was discovered that the Angler exploit kit was also used equally frequently.
Several other Malvertising campaigns have been detected by companies recently, with Malwarebytes researchers recently discovering a campaign based on the Angler exploit kit that targeted a number of high-profile websites, including eBay UK and Answers.com.
Malvertising campaigns are commonly used by criminal organizations to serve their purposes in distributing ransomware or other malware, such as banking trojans and other ad fraud malicious code.
According to experts , the gang behind the recent Malvertising campaigns affects a number of major advertising networks, including AppNexus, DoubleClick and ExoClick.
