Ars Technica used in malware campaign with never-before-seen obfuscation
WHEN USERS ATTACK —
Vimeo also used by legitimate user who posted booby-trapped content.
Getty Images
Ars Technica was recently used to serve second-stage malware in a campaign that used a never-before-seen attack chain to cleverly cover its tracks, researchers from security firm Mandiant reported Tuesday.
A benign image of a pizza was uploaded to a third-party website and was then linked with a URL pasted into the “about” page of a registered Ars user. Buried in that URL was a string of char...
Read more at arstechnica.com