When Does Software Start Becoming Malware?
Summary: Cisco Talos analyzed the "Infinity Popup Toolkit," software delivered via a Flash SWF file that bypasses Google Chrome's pop-up blocker to serve pop-up ads, and is in use by several advertisers on hundreds of sites. The toolkit uses clickjacking and a transparent full-window Flash object to hijack user clicks, decrypts an RC4 binary blob at runtime, and can send a beacon back to the advertiser when ad blocking is detected.
Why it matters: Talos draws the line at software that bypasses a security or privacy control or that a user did not ask to run, and this toolkit is already running on hundreds of sites while evading both Chrome's pop-up blocker and ad-blocking tools.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026