Malvertising Campaign Infected Thousands of Users per Day for More than a Year

Security researchers from Proofpoint and Trend Micro have uncovered a massive malvertising campaign that has been targeting over one million users per day and infecting thousands, running since the summer of 2015, with unconfirmed clues showing that it might date back to as early as 2013.

This malvertising campaign marks the first time that crooks leveraged steganography to transmit malicious code embedded in malicious banner ads.

During their operation, the crooks showed malicious ads on 113 domains, including some big names such as The New York Times, Le Figaro, The Verge, PCMag, IBTimes, ArsTechnica, Daily Mail, Telegraaf, La Gazetta dello Sport, CBS Sports, Top Gear, Urban Dictionary, Playboy, Answers.com, Sky.com, and more.