The latest cybersecurity attack takes advantage of your trust in news sites and your browser to trick you into downloading malware.
Some alarming news broke today that hundreds of U.S. news websites are unwittingly playing a big role in a new malware campaign that’s disguised as a Chrome browser update. This is quite a devious attack method since it’s considered an important security practice to update your browser as soon as possible.
The way hackers are delivering the malware is also clever. It’s coming via an advertising network that also supplies video content to newspaper websites across the nation. It’s difficult to identify and shut down this attack because it is applied intermittently. According to a tweet by the security research team Threat Insight, the JavaScript code is being changed back and forth from the normal harmless ad delivery script to the one that includes the hacker code that shows a false update alert.
Proofpoint Threat Research has observed intermittent injections on a media company that serves many major news outlets. This media company serves content via #Javascript to its partners. By modifying the codebase of this otherwise benign JS, it is now used to deploy #SocGholish. This is a serious problem since many people get their local news from these websites and trust them implicitly. Here’s what you need to know about this dangerous new malware campaign.
According to Bleeping Computer, the message is tailored to match your browser, appearing to be an update for Google Chrome, Mozilla Firefox, or Opera. If you proceed with the download, it will be a malware package rather than a security update. Thankfully, it’s easy to double-check by navigating to browser settings and checking if there are any updates available within the browser controls. Hackers have not been able to insert their malware links into the browser code. Alerts, on the other hand, can be triggered by websites and website advertising, so use extra caution with pop-ups.
Deutschland Neuesten Nachrichten, Deutschland Schlagzeilen
Similar News:Sie können auch ähnliche Nachrichten wie diese lesen, die wir aus anderen Nachrichtenquellen gesammelt haben.
National Opinion: Beware the election denier playbookOPINION: 'By sounding the alarm to make people aware of these threats – and stressing the need to vote and ensure people that their votes will be counted – together we can stop them,' writes Brad Woodhouse, co-chair of Defend…
Weiterlesen »
Update Google Chrome now to patch a high-risk security flawUpdate your Google Chrome browser on Windows, Mac, or Linux ASAP to patch a high-severity zero-day security flaw.
Weiterlesen »
Blockbuster review: Netflix takes a tedious victory lap | Digital TrendsBlockbuster is a half-hearted new sitcom from the very streaming service that killed Blockbuster. Its first season premieres Thursday, November 3 on Netflix.
Weiterlesen »
Where to stream all the James Bond movies | Digital TrendsFor many viewers hoping to watch popular franchises, the era of streaming has been a remarkable gift. Suddenly, a wide array of huge blockbuster movies were at your fingertips and easily accessible. Unfortunately, that only made the difficulty of…
Weiterlesen »
November's Game Pass lineup includes vampires, zombies, and pirates | Digital TrendsXbox GamePass is bringing PC hit VampireSurvivors to console for the first time this November.
Weiterlesen »