Malicious Traffic Distribution System Spotted by Researchers

[1van]

Ono kad se pitamo zašto nas jedan veb sajt odvede na neki deseti...

In that time frame, the researchers have connected VexTrio to takeovers of multiple legitimate domains - in one case, a compromised hospital website in Colombia infected with malicious JavaScript - and especially WordPress sites with known vulnerabilities, which allow them to reroute user traffic. VexTrio also continues to register "large quantities of domains daily" - adding up so far to at least 70,000 malicious domains - by using a dictionary-based domain-generation algorithm, to give them a ready, ever-changing supply of domains for hosting malicious content.

The TDS term hails from the marketing realm, where it refers to intermediaries tracking individual internet users and attempting to serve them relevant advertising. The cybercrime take on this approach typically swaps out legitimate, if not always welcome, advertising in favor of serving victims malicious content.

Just as with legitimate advertising, many cybercrime groups appear to be ready and willing to pay for high-quality referrals, based on a variety of criteria they supply to a TDS provider, experts say.

Izvor: https://www.databreachtoday.com/maliciou...rs-a-24166