Trusted Design

Yahoo! Ad Network Compromised to serve Malvertising

概要

Original reasearch from MalwareBytes: "This latest campaign started on July 28th, as seen from our own telemetry. According to data from SimilarWeb, Yahoo!’s website has an estimated 6.9 Billion visits per month making this one of the largest malvertising attacks we have seen recently."

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Large Malvertising Campaign Goes (Almost) Undetected (score: 0.64)
TrendLabs: Spam Campaign Delivers Cross-platform Remote Access Trojan Adwind (score: 0.62)
A VAST Malvertising Attack (score: 0.60)
WordPress Compromise Campaign (score: 0.59)
China-based Ad Giant Serves Malicious Code Through Ad Slots (score: 0.58)

このPulseに関連する脅威アクター (事実ベース)

Mustard Tempest

Score: 10.84

Matched TTPs:

T1682 - Query Public AI Services
T1059.012 - Hypervisor CLI
T1543.002 - Systemd Service

MITREへのリンク →

Mustang Panda

Score: 11.35

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.005 - Link Target
T1055.005 - Thread Local Storage
T1556 - Modify Authentication Process

MITREへのリンク →

Sandworm Team

Score: 7.69

Matched TTPs:

T1566.002 - Spearphishing Link
T1547.002 - Authentication Package
T1546.016 - Installer Packages

MITREへのリンク →

ZIRCONIUM

Score: 6.87

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.005 - Link Target
T1547.002 - Authentication Package

MITREへのリンク →

APT32

Score: 8.98

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.005 - Link Target
T1059.012 - Hypervisor CLI
T1556 - Modify Authentication Process

MITREへのリンク →

Kimsuky

Score: 6.87

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.005 - Link Target
T1547.002 - Authentication Package

MITREへのリンク →

Magic Hound

Score: 8.63

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.005 - Link Target
T1547.002 - Authentication Package
T1059.012 - Hypervisor CLI

MITREへのリンク →

APT28

Score: 22.25

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.005 - Link Target
T1547.002 - Authentication Package
T1059.012 - Hypervisor CLI
T1146 - Clear Command History
T1588.003 - Code Signing Certificates
T1546.007 - Netsh Helper DLL

MITREへのリンク →

CURIUM

Score: 4.22

Matched TTPs:

T1566.002 - Spearphishing Link
T1059.012 - Hypervisor CLI

MITREへのリンク →

Dragonfly

Score: 7.06

Matched TTPs:

T1566.002 - Spearphishing Link
T1059.012 - Hypervisor CLI
T1546.016 - Installer Packages

MITREへのリンク →

Patchwork

Score: 4.22

Matched TTPs:

T1566.002 - Spearphishing Link
T1059.012 - Hypervisor CLI

MITREへのリンク →

Earth Lusca

Score: 6.61

Matched TTPs:

T1608.005 - Link Target
T1059.012 - Hypervisor CLI
T1546.016 - Installer Packages

MITREへのリンク →

Contagious Interview

Score: 4.76

Matched TTPs:

T1608.005 - Link Target
T1556 - Modify Authentication Process

MITREへのリンク →

Turla

Score: 9.01

Matched TTPs:

T1608.005 - Link Target
T1547.002 - Authentication Package
T1059.012 - Hypervisor CLI
T1546.016 - Installer Packages

MITREへのリンク →

MuddyWater

Score: 4.41

Matched TTPs:

T1608.005 - Link Target
T1547.002 - Authentication Package

MITREへのリンク →

FIN7

Score: 4.41

Matched TTPs:

T1608.005 - Link Target
T1547.002 - Authentication Package

MITREへのリンク →

Lazarus Group

Score: 15.89

Matched TTPs:

T1608.005 - Link Target
T1547.002 - Authentication Package
T1059.012 - Hypervisor CLI
T1546.016 - Installer Packages
T1055.005 - Thread Local Storage
T1556 - Modify Authentication Process

MITREへのリンク →

Gamaredon Group

Score: 4.41

Matched TTPs:

T1608.005 - Link Target
T1547.002 - Authentication Package

MITREへのリンク →

POLONIUM

Score: 4.41

Matched TTPs:

T1608.005 - Link Target
T1547.002 - Authentication Package

MITREへのリンク →

APT37

Score: 4.16

Matched TTPs:

T1547.002 - Authentication Package
T1059.012 - Hypervisor CLI

MITREへのリンク →

Leviathan

Score: 4.60

Matched TTPs:

T1059.012 - Hypervisor CLI
T1546.016 - Installer Packages

MITREへのリンク →

Daggerfly

Score: 4.60

Matched TTPs:

T1059.012 - Hypervisor CLI
T1546.016 - Installer Packages

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.81

Matched TTPs:

T1059.012 - Hypervisor CLI
T1546.007 - Netsh Helper DLL
T1547.002 - Authentication Package
T1588.003 - Code Signing Certificates
T1608.005 - Link Target
T1566.002 - Spearphishing Link
T1146 - Clear Command History

MITREへのリンク →

Lazarus Group

Score: 0.58

Matched TTPs:

T1059.012 - Hypervisor CLI
T1547.002 - Authentication Package
T1608.005 - Link Target
T1546.016 - Installer Packages
T1556 - Modify Authentication Process
T1055.005 - Thread Local Storage

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る