Security News > 2023 > February > ChromeLoader campaign lures with malicious VHDs for popular games
Security researchers have noticed that the operators of the ChromeLoader browser hijacking and adware campaign are now using VHD files named after popular games.
The malicious files were discovered by member of the Ahnlab Security Emergency Response Center through Google search results to queries for popular games.
A network of malvertising sites distributes the malicious files, which appear as legitimate game-related packages, that install the ChromeLoader extension.
ChromeLoader hijacks the browser searches to show advertisements.
In all cases seen throughout 2022, ChromeLoader arrived on the target system as an ISO file.
According to ASEC, ChromeLoader will start redirecting to advertisement sites, thus generating revenue for its operators.