Tag archive
Ads in AT&T's Yahoo Mail sent some Windows users to a fake Microsoft support alert, while our data center visit got an article. The scam kit ran on…
Citizen Lab’s investigation into AdFection found a campaign using ads and zero-click exploits to install malware. Discover-Tech acted as an advertising par
Two cloaked ad chains in AT&T's Yahoo Mail: an Azure frame over a dating site, and a Branch link through a TDS. The scam kit ran on 536 cloud hosts.
How 1,235 Meta ads under 74 profile names distributed an Android toll fraud operation, and what service data can and cannot show about its infrastructure.
How a Meta ad campaign and Google Play listings delivered an Android toll fraud chain, and which internet-facing layer ZoomEye can inventory.
A real Carnival booking confirmation passed SPF, DKIM and DMARC while one link served customers malware. The lapsed domain behind it, and what it…
A cloaked link served malware to real visitors and a blank page to every scanner that checked it. Why a single vantage point can never see the…