Malvertising Found On Porn Sites
Posted by: Timothy Weaver on 10/01/2015 09:18 AM
[
Comments
]
A warning is being posted to not hit ads while perusing porn sites. In a rash of malvertising, PornHub and YouPorn were hit with malvertising that employed the Angler Exploit Kit – via the Exoclick ad network - that appears to deliver browlock, a browser-based ransomware.
ITPro reports that hackers were able to sneak malware into the ExoClick ad network used by PornHub and YouPorn, which are both published by MindGeek.
Last Friday, adult site xHamster was targeted in a similar campaign that served malicious ads through TrafficHaus.
MindGeek and ExoClick quickly removed the malicious "cookiecheck.js" code, but with the large amount of traffic the sites generate, one can see how an undetected attack on the two sites could cause major problems.
MindGeek made the following statement:
We were alerted to the presence of a malicious advertisement appearing on a select few of Pornhub’s web properties. It was quickly determined that the malware originated from a third party advertising partner, and we responded immediately to disable all advertisements associated with this third party. ... MindGeek proactively audits all third party advertisements displayed on our site on a continual basis.
Beware of clicking on ads as this seems to be a new trend with the hackers.
Source: Slate

Last Friday, adult site xHamster was targeted in a similar campaign that served malicious ads through TrafficHaus.
MindGeek and ExoClick quickly removed the malicious "cookiecheck.js" code, but with the large amount of traffic the sites generate, one can see how an undetected attack on the two sites could cause major problems.
MindGeek made the following statement:
We were alerted to the presence of a malicious advertisement appearing on a select few of Pornhub’s web properties. It was quickly determined that the malware originated from a third party advertising partner, and we responded immediately to disable all advertisements associated with this third party. ... MindGeek proactively audits all third party advertisements displayed on our site on a continual basis.
Beware of clicking on ads as this seems to be a new trend with the hackers.
Source: Slate
Comments