Check Point: Hackers use over 10,000 hacked WordPress sites to launch malvertising campaign

Recently, network security company Check Point disclosed a massive malicious advertising attack. The attacker hijacks user traffic to gain black benefits by buying a website ad slot in a legal coat.

Researchers speculate that these unidentified ad slots have joined the legitimate online advertising platform to ensure proper access to their target customers – major online criminal gangs that hijack victims’ network traffic, redirects Go to the crooks website or use tools to push malware such as ransomware, online banking Trojans or mining plugins.

Check Point said in the report that Master134 is the black hand behind this malicious attack. The gang has invaded more than 10,000 websites based on WordPress CMS 4.7.1. After taking over the site, it opened its website advertising space and released it in real-time. Auction advertising platform AdsTerra.These ad slots flow to major online criminal gangs through ad resellers such as AdKernel, AdventureFeeds, EvoLeads, and ExoClick.

After purchasing these ad slots, the attacker exploits unpatched vulnerabilities in the user’s browser or related plug-ins (such as Adobe’s Flash Player) to run malicious JavaScript code, and users who click on these malicious ads will be attacked. An attacker can even locate a user based on a less secure operating system, browser, or a specific type of device.

The advertising content that is ultimately pushed to the user depends on the user’s identity, location, type of device used, etc., and the online advertising field still lacks the necessary verification technology. It is difficult for the industry to thoroughly review each ad to avoid the distribution of malicious content.

This is very popular for online criminal gangs, because they can not only buy “advanced” advertising space on legitimate online advertising platforms, but also illegal income can be washed through the payment system. They even compare the proceeds of the attack with the advertising expenditure to measure the rate of return.

Researchers at Check Point said third-party ad publishing platforms and resellers might be aware of these situations, but still choose to help parties in the black interest chain complete the transaction.

According to the security company’s findings, the attacker is likely to pay the Master 134 directly, and Master 134 pays the online advertising system for the cost of the redirect or even the source of the fuzzy traffic. The third-party platform used by an attacker to purchase a website ad slot is legal, so an attacker can use the platform to precisely control the user’s traffic.

Such malicious advertisements are still hanging on a large number of websites, and about 40,000 users are even attacked and infected every week.

Advertisements

Tips and tricks to finding the best bargains on Amazon!

Do you like shopping? Do you enjoy the smell of freshly unpacked merchandise? Well who doesn’t? In that case, you will appreciate the following tips and tricks to save money and time!

First of all, shipping costs. Whenever I search for something to buy, I won’t lie, I always filter by shipping costs. If it is free then it is definitely a deal.

If you shop a lot, or you know over the next month you’ll be doing a lot of discounted shopping, e.g. Christmas shopping or moving home, sign up to Amazon Prime’s 30 day free trial and get free unlimited two day shipping.

Included in the Amazon Prime’s 30 day free trial is unlimited access to their huge e-book store with over 350,000 Kindle books to borrow for free and more than 800,000 free eBooks to download, 1-day delivery and access to over 41,000 movies and TV shows!

If you opt for the free trial, REMEMBER to set a reminder to cancel before the subscription ends, or you will be charged $99 for annual membership.

And what about lowering the price it self a little? If you’re thinking about buying an item, but it’s not urgent, like a laptop upgrade, check out Amazon’s upcoming deals section daily, and stalk what deals are coming up and how long they’ll be live for.

Amazon also have a ‘deals of the day’ section where they post a trio or so of the day’s best offers, on everything from food to fashion.

This can be as much as 70% off on baby monitors, watches, jewellery and fashion.

View Amazon’s Upcoming Deals here.

Check the Amazon’s Deals of the Day here.

Hurry up and get Amazon’s Lightning Deals here! (they don’t call them lightning for nothing…)

International Dog Festival Athens 2015

International Dog Festival Athens 2015

dogfest_slide2dogfest_slide

Ετοιμαστείτε το τριήμερο 9 με 11 Οκτωβρίου να απολαύσετε μαζί με την οικογένεια σας, τα παιδιά σας και τους φίλους σας την μεγάλη γιορτή για τον σκύλο. Τη διοργάνωση έχει αναλάβει η εταιρεία «Well Done» με τη πολύτιμη αρωγή και συνεργασία του Κυνολογικού Ομίλου Ελλάδος, ο οποίος ταυτόχρονα θα πραγματοποιήσει Τριπλή Διεθνή Έκθεση Σκύλων Το τριήμερο φεστιβάλ θα λάβει χώρα στο MEC Παιανίας και αναμένεται να αποτελέσει ένα από τα κορυφαία γεγονότα της χρονιάς και το σημείο συνάντησης όλων των φίλων του σκύλου.
Ώρες λειτουργίας:

Παρασκευή 9 Οκτωβρίου: 12:00 – 22:00

Σάββατο 10 Οκτωβρίου: 10:00 – 22:00

Κυριακή 11 Οκτωβρίου: 10:00 – 22:00

Είσοδος Ελεύθερη

Για περισσότερες πληροφορίες μπορείτε να επισκεφτείτε το σύνδεσμο http://sh.st/biUCv vα απευθυνθείτε στο τηλέφωνο +30 210 7794529, ή στην ηλεκτρονική διεύθυνση info@welldone.com.gr

The Robbery

Two friends, Jim and Paul are in a bank, when, suddenly, armed robbers burst in.

While several of the robbers take the money from the tellers, others line the customers up against a wall and proceed to take their wallets, watches, etc.

While this is going on, Jim slips something into Paul’s hand. Without looking down, Paul whispers, «What is this?»

Jim replies, «It’s that $50 I owe you.»
#joke