Malware spotted lurking on YouPorn and Pornhub

Malvertising campaign had 800 million potential victims before being removed

More malware targeting popular porn sites emerged over the weekend, with Pornhub and YouPorn being the latest affected.

Spotted by security firm Malwarebytes, hackers inserted a rogue piece of legitimate-seeming code into the ExoClick ad network used by the websites, with the resulting adware appearing as an ad banner.

The malicious code, known as cookiecheck.js, was quickly removed by the ad network and by the porn sites' publisher, MindGeek, thereby protecting their 800 million monthly visitors.

But had the code not been spotted quickly, it would have redirected victims to an Angler Exploit Kit that hackers could have used to infect their victims' computers with programs like ransomware.

Other porn sites have been served similar malware by hackers in the last fortnight, with xHamster targeted by an SSL malvertising campaign that was first seen on Yahoo.com and MSN.com.

Malwarebytes called the recent prevalance of porn site attacks "strange", adding: "During the past several months, high profile malvertising attacks against top adult sites have been sparse.

"This makes what we have seen during the past couple of weeks very unusual but also impactful given the sheer volume of traffic these sites receive."

MindGeek said in a statement: "We were alerted to the presence of a malicious advertisement appearing on a select few of Pornhub's web properties. It was quickly determined that the malware originated from a third party advertising partner, and we responded immediately to disable all advertisements associated with this third party, and continue to actively investigate this incident."

Featured Resources

Security analytics for your multi-cloud deployments

IBM Security QRadar SIEM solution brief

Download now

Five reasons to move to the cloud

Join the enterprises moving their workloads to the cloud

Download now

Architecting hybrid IT and edge for digital advantage

Why business leaders should consider a hybrid IT strategy

Download now

Six reasons to accelerate remote asset monitoring with AI

How to optimise resources, increase productivity, and grow profit margins with AI

Download now

Recommended

CISA warns of ongoing Accellion File Transfer Appliance attacks
hacking

CISA warns of ongoing Accellion File Transfer Appliance attacks

25 Feb 2021
What is a Trojan?
Security

What is a Trojan?

25 Feb 2021
FedEx and DHL phishing emails target Microsoft users
phishing

FedEx and DHL phishing emails target Microsoft users

24 Feb 2021
Cyber security firm saw attacks rise by 20% during 2020
cyber security

Cyber security firm saw attacks rise by 20% during 2020

23 Feb 2021

Most Popular

Npower shuts down app after hackers steal user data
hacking

Npower shuts down app after hackers steal user data

25 Feb 2021
Hackers publish Bombardier data in wide-reaching FTA cyber attack
cyber attacks

Hackers publish Bombardier data in wide-reaching FTA cyber attack

24 Feb 2021
New monitors for an agile new normal
Sponsored

New monitors for an agile new normal

19 Feb 2021