Forest Global Training Partners

Cyber Risks · Cisco Talos

Threat Spotlight: “Kyle and Stan” Malvertising Network 9x Larger Than Expected

Summary: Cisco Talos reported on September 8 that the "Kyle and Stan" malvertising network placed malicious ads on amazon.com, ads.yahoo.com, www.winrar.com, youtube.com and 70 other domains, and follow-on research found the network is 9 times larger than first reported, with 6,491 domains sharing the same infrastructure versus the 703 previously named. Talos observed 31,151 connections to those domains, traced the first malware, spyware and adware distribution attempts to January 2012, and noted that domains such as megashre.info and file36.com remain active while others are used briefly and replaced.

What's compelling: The attackers have been active for over two and a half years, and the domain count of 6,491 is still growing daily, so the reach of a network seeded through well-known sites is not a fixed number your blocklists can catch up to once.

Read the original at Cisco Talos ↗

Topics
Malware
Related