Malicious web redirect service infects 16,500 sites to push malware

Malicious web redirect service infects 16,500 sites to push malware (bleepingcomputer.com)

“A new traffic direction system (TDS) called Parrot is relying on servers that host 16,500 websites of universities, local governments, adult content platforms, and personal blogs”. Parrot is a TDS designed for malicious campaigns targetting a specific profile of users (location, OS, browser). This redirects users to malicious websites. TDS is also used legitimately by advertisers and marketers, but they have been prone to malicious usage. This specific campaign is called FakeUpdate, which tricks users into clicking on a fake browser update and downloads remote access trojans to a target’s PC. The malware is NetSupport Client run on silent mode, which gives full access to a target PC without a target being aware.

Kenneth Saltisky