Modern Malvertising and Malware web-based exploit campaigns
summary
Walkthrough shows a real malvertising chain: ad creatives or iframes redirect to a traffic distribution system that rotates targets via a simple rotator PHP admin panel and hands users to exploit kits or scareware. Risk data cites about 670,000 bad ads seen year to date, mobile campaigns rising toward 50%, CPMs under a dollar, and attackers shifting from silent exploits to social‑engineering browser‑lock and fake‑update installers for fast monetization.
AI-written summary · about
chapters (26)
- 0:00Start
- 0:12Agenda
- 1:14About you
- 3:35About James
- 5:28About Ethan
- 6:24About our company(RiskIQ)
- 14:12Ad Exchange
- 15:56Advertiser solution: DSP
- 17:04Publisher Solution: SSP
- 18:41Why do criminals like ads?
- 20:54Retargeting
- 24:40Example (Car Focused Ad Network)
- 25:40How to utilize this as a pentester
- 27:07My ad campaign
- 31:04Security
- 35:22Malware authors enter the fold
- 37:22Intro to Malvertising
- 38:28Why is this concerning?
- 40:45Marketplace
- 41:18How big of a problem
- 46:59Core components of Malvertisements
- 49:02Rotator/TDS Example
- 49:26Exploit Kits & Other Malicious Stuff
- 50:26Scareware Example
- 51:13Mobile Lockers
- 51:46Conclusion
related talks
55mModern Malvertising ...
31mWatching Commodity Malware Get Sold to a Targeted Actor
16mBeyond the surface: uncovering hidden threats in online ads
05mQuick Look: Exploit Kits and Malware ROI
36mMaliciously Monetizing AppSec Feature. Its All About The Money.
49mThe State Of Malware From The Eye Of The Tiger
30mReversing Mobile Malware
44mBeyond Desktops: The Rise and Transformation of Mobile Malware