Security News > 2022 > September > Traffers threat: The invisible thieves
Traffers are generally organized as teams and compromise websites in order to hook the traffic and bring the visitors to malicious content.
The typical organization for such a team is pretty straightforward: One or several team administrators lead traffers but also handle the malware licenses and the analysis and selling of the logs collected by the traffers.
The biggest activity from traffers consists of redirecting Internet users to malware, 90% of which consists of information stealers.
Once recruited, traffers are able to get the malware files and distribute via redirections from compromised websites.
Experienced traffers seem to have a very good knowledge of advertising platforms and manage to increase the promotion of their websites via those services.
The majority of traffers teams monitored by Sekoia are actually exploiting a method called "911" in underground forums.