- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 4 sources carry it
- Identifier
- GINC-APT-0515 · eviltraffic
What it is
Malware experts at CSE Cybsec uncovered a massive malvertising campaign dubbed EvilTraffic leveraging tens of thousands compromised websites. Crooks exploited some CMS vulnerabilities to upload and execute arbitrary PHP pages used to generate revenues via advertising.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Operations
- Operation EvilTraffic
Tools
The tools and malware families the sources tie to it.
- Revenge-RAT
- Xpert
- Xploit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de