Talos Shadow Gate Take Down: Global Malvertising Campaign Thwarted
Summary: Cisco Talos documented a global malvertising campaign, named ShadowGate, that used domain shadowing to redirect users to exploit kits and affected potentially millions of visitors across North America, Europe, Asia Pac, and the Middle East. Talos observed over 900K attempted interactions with ShadowGate in earlier research, with only 0.1% leading to an exploit kit, and worked with GoDaddy to take back the registrant accounts and take down the applicable subdomains.
What's compelling: The gate ran on shadowed subdomains of legitimate registrant accounts, and Talos notes the campaign will likely only stay dormant for a while before adversaries restart it, so the takedown buys time rather than closure.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026