Infected Ads On MSN.com Spread Malware

Cyber ​​criminals have managed to infected ads on MSN.com get, the web portal of Microsoft, who then attempted to install malware on visitors. It is the same group of criminals who had previously been infected ads on the websites of Yahoo got.

Reported anti-virus company Malwarebytes. The ads redirect users to a page with the Angler-exploitkit. This exploitkit uses known vulnerabilities include Adobe Flash Player that users are not patched. What was there for malware through compromised advertisements installed is unknown, but through the Angler-exploitkit often ransomware malware and distributed for advertising fraud.

The infected ads came from the ad network AdSpirit.de, already described for the display of advertisements was infected on many popular websites responsible, including Yahoo. Picked up in the case of MSN advertising was via AppNexus at AdSpirit. AppNexus in June was also involved in infectious ads on the website of The Telegraph. Meanwhile the infected ads MSN.com removed.

Great Campaign With Infected Ads On Yahoo

Cyber criminals have used the Yahoo ad network to spread contagious among Internet ads. According to anti-virus firm Malwarebytes involved a large-scale attack that began on July 28. The advertisements appeared on various Yahoo sites.

It was among other things, yahoo.com , news.yahoo.com and games.yahoo.com . The websites get together about 6.9 billion visitors per month. The ads showed visitors from Yahoo unnoticed load a page with the Angler exploitkit. This exploitkit uses known vulnerabilities include Adobe Flash Player that users are not patched.

It is unknown what type of malware is installed on a successful attack on computers, but in the past Angler's exploitkit used to infect computers with malware and ransomware committing click fraud. After being informed Yahoo pulled the ad campaign from the air. The Internet giant states in response that it and other Internet companies working on a secure "advertising experience."

Yahoo Will Pay Researchers $ 1 Million For Bug Reports

Since Internet giant Yahoo late 2013 a reward program for researchers and hackers have started it more than $ 1 million paid to bug reports. In total, Yahoo received during this period 10,000 bug reports, of which 1500 were finally rewarded financially, so let the company know .

Of the more than 1,800 people who took part in the rewards program have delivered about 600 bugs that could be verified. It is a small group bug detectors (6%) which is responsible for 50% of all bug reports. According to Yahoo was the addition of a reputation system to the reward program a big improvement. This gives researchers points for reporting verified bug reports, and the amount of the paid compensation. Through the reputation system, researchers can then compare the program with other participants their skills.

Yahoo Unveils Own Login Without Password

Yahoo has unveiled a new service allowing users without their password on their account login. Instead of getting the own Yahoo password to remember, users of the new "on-demand" service sent an SMS with a short password, which must be completed.

To use the service, users must first log in using their own password and then register their phone. If the service is enabled, the user gets the next time he wants to login to see no password field, but a button that the password code of four characters is sent to his unit.

"This is the first step in eliminating passwords", said Yahoo CEO Dylan Casey while Southwest festival in Texas know. The process resembles that of two-factor authentication, only without the first factor, the password of the user. The new service is now available for US users, according to Yahoo . When it appears for other users is unknown.