Contaminated Advertisements For Months On Popular Sites

A group of cyber criminals has been struggling for months with showing infected ads on popular websites including Photobucket, Huffington Post and several webmail providers. Once visitors of these websites get to see the ads, they can become infected with malware.

The group would include used a zero-day vulnerability in Adobe Flash Player to infect computers. Before warns security firm Invincea . The company has a list of domains and data put online showing that the group since October 17 last year, "malvertising" is in progress. Offered to the infected ads on the websites show is include in "real time" on the available ad space.

According Invincea would malicious ads on CBS Sports, Russia Today, answers.com , Jerusalem Post, Match.com , News.com.au , search.aol.com and thesaurus.com have appeared. Furthermore, also webmail domains such webmail.nc.rr.com , webmail.windstream.net , mail.twc.com and webmail.earthlink.net for the overview. In total there are 51 different domain names.

"It is important to mention that the sites where the infected ads appear not know that their sites are used for distributing malware and largely also can not do anything," said the security company.

VirusTotal - "Online Virus Scanner Google Focuses On Java malware"

VirusTotal, an online virus scanner from Google last month quietly several improvements made ​​so researchers are better able to analyze Java malware. Via VirusTotal users can upload files and then to scan dozens of virus scanners.

In early December an update was rolled out to provide more information about suspicious Mac files and iOS apps. Silently was also improved the analysis of JAR files and Java .class files. The online virus scanner scanned the contents of these files already, but now also provides additional information, such as the used Java packages, the manifesto of the JAR-beam striking strings, file type distribution and timestamp metadata for files in the JAR file.

According to Emiliano Martinez VirusTotal is a lot of malware nowadays spread via exploits kits, of which a large portion of malicious JAR files uses to attack unpatched Java vulnerabilities. By expanding the virus Martinez hopes that researchers better this kind of threats can detect and analyze.