On the media website of Telstra, the largest ISP and telecommunications company in Australia with 27 million customers, are infected ads appeared that visitors with malware trying to infect. The ads on media.telstra.com.au let visitors unnoticed a page with the Nuclear-exploitkit charge. This exploitkit is using known vulnerabilities in Adobe Flash Player and Internet Explorer.
What kind of malware was spread via the attack is unknown, but anti-virus company Malwarebytes think it's going to Tinba banking Trojan. This is a Trojan specifically designed to steal money from online bank accounts. The attack on the infected ads is very similar to the attack that was recently on dating site PlentyOfFish observed. The infected ads on the Telstra website were several days running.
