Click to Enlarge
Click to Enlarge
Yahoo has fake Adobe Flash adverts instead, located at gripwise(dot)com(dot)au/player/:
Click to Enlarge
Click to Enlarge
As you can see from the below screenshot, the Gripwise URL where this is located appears to have been compromised:
Click to Enlarge
Both sites will give you the Privacy Protection rogue, and the domain used for the fake Firefox download (ipropertyoffice(dot)com) has active exploits so please steer clear. VirusTotal scores weigh in at 17/43, and we detect as Win32.Malware!Drop.
Click to Enlarge
At time of writing, Microsoft have been notified and have said the adverts have been pulled. All the same, be very careful when clicking on sponsored adverts for common downloads such as Firefox, Flash and others. As we've seen time and time again, scammers are all too eager to push malicious files on unsuspecting users.
Christopher Boyd (Thanks Matthew)
No comments:
Post a Comment