Malware spotted lurking on YouPorn and Pornhub

Malvertising campaign had 800 million potential victims before being removed

X-rated phishing attacks just keep growing

More malware targeting popular porn sites emerged over the weekend, with Pornhub and YouPorn being the latest affected.

Spotted by security firm Malwarebytes, hackers inserted a rogue piece of legitimate-seeming code into the ExoClick ad network used by the websites, with the resulting adware appearing as an ad banner.

The malicious code, known as cookiecheck.js, was quickly removed by the ad network and by the porn sites' publisher, MindGeek, thereby protecting their 800 million monthly visitors.

But had the code not been spotted quickly, it would have redirected victims to an Angler Exploit Kit that hackers could have used to infect their victims' computers with programs like ransomware.

Other porn sites have been served similar malware by hackers in the last fortnight, with xHamster targeted by an SSL malvertising campaign that was first seen on Yahoo.com and MSN.com.

Malwarebytes called the recent prevalance of porn site attacks "strange", adding: "During the past several months, high profile malvertising attacks against top adult sites have been sparse.

"This makes what we have seen during the past couple of weeks very unusual but also impactful given the sheer volume of traffic these sites receive."

MindGeek said in a statement: "We were alerted to the presence of a malicious advertisement appearing on a select few of Pornhub's web properties. It was quickly determined that the malware originated from a third party advertising partner, and we responded immediately to disable all advertisements associated with this third party, and continue to actively investigate this incident."

Featured Resources

The definitive guide to warehouse efficiency

Get your free guide to creating efficiencies in the warehouse

Free download

The total economic impact™ of Datto

Cost savings and business benefits of using Datto Integrated Solutions

Download now

Three-step guide to modern customer experience

Support the critical role CX plays in your business

Free download

Ransomware report

The global state of the channel

Download now

Recommended

New malware uses search engine ads to target pirate gamers
malware

New malware uses search engine ads to target pirate gamers

21 Jul 2021
Nigerian cyber criminals target Texas unemployment system
cyber security

Nigerian cyber criminals target Texas unemployment system

27 May 2021
Hackers use open source Microsoft dev platform to deliver trojans
Security

Hackers use open source Microsoft dev platform to deliver trojans

14 May 2021
HackBoss malware is using Telegram to steal cryptocurrency from other hackers
cryptocurrencies

HackBoss malware is using Telegram to steal cryptocurrency from other hackers

16 Apr 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

17 Sep 2021
What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

8 Sep 2021
Best MDM solutions 2020
mobile device management (MDM)

Best MDM solutions 2020

17 Sep 2021