Confiant Blog
blog.confiant.com · Company blog · on HN since 2018
Confiant's security research blog on malvertising, ad-delivered malware, crypto drainers and ad fraud campaigns.
What HN saysHN links it for analyses of malvertising and crypto wallet drainers, and commenters cite it in arguments over whether ads are a real malware risk.
18HN people shared it
4linked it in comments
24stories submitted
481story points
4 years agolast shared
2018people per year2026
Most-shared posts
- 1Uncovering 2017’s Largest Malvertising Operation3 people · 117 points · first shared 2018 · 8 comments on HN
- 2CashRewindo: How to age domains for an investment scam like fine scotch2 people · 2 points · first shared 2022 · discussion on HN
- 3“Crypto drainer” template facilitates theft1 people · 187 points · first shared 2022 · 219 comments on HN
- 4Steganography Based Ad Payload That Drops Shlayer Trojan on Mac Users1 people · 128 points · first shared 2019 · 73 comments on HN
- 5How SeaFlower installs backdoors in Web3 wallets to steal your seed phrase1 people · 12 points · first shared 2022 · discussion on HN
- 6Malvertising: Made in China1 people · 5 points · first shared 2021 · 1 comments on HN
- 7How Malvertiser “VeryMal” abused Firebase to conceal and smuggle their payload1 people · 4 points · first shared 2019 · discussion on HN
- 8OS X/Shlayer New Shurprise.. Unveiling OS X/Tarmac1 people · 3 points · first shared 2019 · discussion on HN
- 9Malvertiser ‘EGobbler’ Exploits Chrome and WebKit Bugs, Infects over 1B Ads1 people · 3 points · first shared 2019 · 1 comments on HN
- 10New macOS Bundlore Loader Analysis1 people · 2 points · first shared 2019 · discussion on HN
- 11Tag Barnakle: The Malvertiser That Hacks Ad Servers-Redirects Victims to Malware1 people · 2 points · first shared 2020 · discussion on HN
- 12Fake Celebrity-Endorsed Scam Abuses Ad Tech to Net $1M in One Day1 people · 2 points · first shared 2020 · discussion on HN
- 13DCCBoost: A thorough analysis of a malvertising JavaScript attack chain1 people · 2 points · first shared 2021 · discussion on HN
- 14A deep dive into a live example of cloaking based ad fraud1 people · 2 points · first shared 2019 · discussion on HN
- 15Hong Kong Based Malvertiser Brokers Traffic to Fake Antivirus Scams1 people · 2 points · first shared 2019 · discussion on HN
What HN people wrote when they linked it
WalterSear · 2022-07-01
Probably a wallet drainer. Connect it with your wallet and empties it.
https://blog.confiant.com/how-one-crypto-drainer-template-facilitates-…
tempodox · 2021-06-06
Many of the screenshots in the posted article are too small and blurry to be of any use. In the original article [1] they can be zoomed and are actually readable.
[1] https://blog.confiant.com/osx-hydromac-a-new-macos-malware-leaked-from…
ericheymer · 2018-02-04
The notion that advertisements pay for websites is entirely fabricated. Recent research shows massive amounts of fraud with the involvement of the ad industry which eats through the money flowing through the ecosystem. See https://www.buzzfeed.com/craigsilverman/ad-industry-insiders-are-conne… and https://blog.confiant.com/uncovering-2017s-largest-malvertising-operat…
autoexec · 2021-12-06
> Name any CSS or JS exploit that had meaningful real-world impact in the last decade. The tale of frequent compromises of browsers via ads is told merely to legitimize the practice of blocking even entirely plain and benign ads.
I think the actual malware infections themselves legitimize the practice of blocking even entirely plain and benign ads.
Ads do still infect people with malware.
https://blog.confiant.com/tag-barnakle-the-malvertiser-that-hacks-revi…
Hell, yahoo was hit not that long ago and users were at risk of infection just by loading yahoo.com.
JS exploits and malware written in JS are common, but so far I haven't seen CSS used to infect systems, just steal data/log keystrokes and add a lot of privacy concerns which is bad enough. I'm already keeping an eye out for a CSS blocker that will only allow a sane subset of CSS and block or limit externally hosted resources.