Trusted Design

China-based Ad Giant Serves Malicious Code Through Ad Slots

概要

At FireEye Labs, we have discovered another well-crafted malvertising campaign that uses the ad API of one of the world’s largest search engines: China-based Baidu. The attacker employs a simple HTML redirector instead of shellcode or an exploit in an apparently benign-looking website. This leads to a redirection loop fetching malicious content from compromised ad slots, which starts dropping malwares in a chain on the infected machine. This malvertising campaign involving Baidu’s API has been designed in a way so that its actual source is hard to trace back. Source : https://www.fireeye.com/blog/threat-research/2016/03/china-based_ad_giant.html

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Large Malvertising Campaign Goes (Almost) Undetected (score: 0.69)
• Unusual Exploit Kit Targets Chinese Users,2 (score: 0.64)
• The HookAds Malvertising Campaign (score: 0.64)
• Unusual Exploit Kit Targets Chinese Users (score: 0.64)
• Chinese Government Website Compromised, Leads to Angler (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る