Blog for hpHosts, and whatever else I feel like writing about ....

Friday, 7 February 2014

Alert: traffichold.com compromised (again)

traffichold.com appears to have been compromised again, and is leading to the Angler exploit kit.

exactly the same as October 30 – traffichold.com hacked and leading to Angler EK

http://cs.traffichold .com/www/delivery/afr.php?zoneid=109&cb=INSERT_RANDOM_NUMBER_HERE&wm=16495&pr=4319255&prd=300×250&ts=failover&tsd=banner&prm=rev <== iframe to panafrika http://cs.traffichold .com/www/delivery/fl.js

rotator : http://offline.panafrika.net/pagead/show_ads.js


Read report:
http://www.malekal.com/2013/10/14/reveton-malvertising-campaign/2/#S526hRkXwikFyUuO.99

No comments: