Security News > 2020 > April > Copycat Site Serves Up Raccoon Stealer

Copycat Site Serves Up Raccoon Stealer
2020-04-09 18:25

Someone is targeting web denizens with a malicious, copycat Malwarebytes website, which serves up the Raccoon information stealer malware to unsuspecting visitors.

Further, the fake Malwarebytes site is being used in a malvertising campaign via the PopCash ad network, researchers added.

Fake Malwarebytes ads served up by the PopCash network on adult websites take visitors to the watering-hole site.

Malwarebytes researchers believe that the targeting of security firms could be a deliberate tactic meant as payback for revealing malvertising activity.

"The few malvertising campaigns that remain are often found on second- and third-tier adult sites, leading to the Fallout or RIG exploit kits, as a majority of threat actors have moved on to other distribution vectors," Malwarebytes said in its post.


News URL

https://threatpost.com/malwarebytes-copycat-site-raccoon-stealer/154638/