Threat Spotlight: "Kyle and Stan" Malvertising Network Threatens Windows and Mac Users With Mutating Malware
Summary: Cisco Talos uncovered a malvertising network it nicknamed "Kyle and Stan" that served malicious ads through popular domains including amazon.com, ads.yahoo.com, youtube.com and www.winrar.com, delivering a unique malware bundle to each visitor. Talos found 700+ domains tied to the network, observed 9,541 connections to the malicious domains, and reversed samples for both Windows and Mac, including a Mac package bundling the legitimate MPlayerX application with the Conduit and VSearch adware/browser hijackers.
Key Takeaway: The attackers relied on social engineering rather than drive-by exploits, and each download was compiled with a unique configuration so checksums differed every time - meaning signature-based detection had little to match against across 9,541 observed connections.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026