October 24 -27, 2020

Assessment:  Two new malicious campaigns emerged and were blocked this weekend.  

Threat #1:  Affecting both mobile and desktop, fake fashion & car ads are redirecting users to unwanted landing pages like the ones below. 

Sample landing pages:

m.valueprizes[dot]best
v.valuepoints[dot]host
m.earnpoints[dot]today
t.earnpoints[dot]work
m.pointsprize[dot]online
m.pointsprize[dot]site

Threat #2:  Also affecting mobile and desktop, this campaign rotated malicious scripts from an ad server CDN to drive users to nefarious landing pages like hlcczebndb[dot]com.

Affected platforms:  Uprival Adserver, Verizon, Sonobi


`` `` ``