Jérôme SeguraAug 16, 2023

If you track #malvertising campaigns, you may need to adjust your environment to account for more advanced fingerprinting techniques.

More details in this blog: https://www.malwarebytes.com/blog/threat-intelligence/2023/08/malvertisers-up-the-game-against-researchers

Malvertisers up their game against researchers

Malicious ads via search engine results page are getting harder to identify thanks to advanced fingerprinting techniques

Malwarebytes
Show threadmithrandir

@jeromesegura

Great writeup. I had recently been stumped by exactly the scenario you've outlined.

Aug 16, 2023 at 6:51pmWeb
Show threadJérôme SeguraAug 16, 2023
@mithrandir thank you. It's an annoying trend, isn't it?
Show threadmithrandirAug 16, 2023
@jeromesegura It really is. Good lesson for me not to assume the site hadn't been fully set up yet and to keep digging!
Show threadJérôme SeguraAug 16, 2023
@mithrandir yea, that's why I thought before, giving them time to finish it up... but not, it was already up and running. I guess it makes sense since the ads are running.