HookAds is a malvertising campaign that purchases cheap ad space on low quality ad networks commonly used by adult web sites, online games, or blackhat seo sites. These ads will include JavaScript that redirects a visitor through a serious of decoy sites that look like pages filled with native advertisements, online games, or other low quality pages. Under the right circumstances, a visitor will silently load the Fallout exploit kit, which will try and install its malware payload.
Executive Summary
HookAds is a malvertising campaign targeting victims through low-quality ad networks. It redirects users to decoy sites and deploys the Fallout exploit kit to deliver malware payloads. The campaign primarily operates across various sectors, including adult websites and online gaming platforms, aiming to infect devices for malicious purposes.
Goals & Targeting
HookAds targets sectors with high ad traffic but lower security standards, such as adult content, online gaming, and blackhat SEO sites. The campaign likely seeks to maximize reach while minimizing detection by targeting platforms that are more susceptible to exploitation. Victims are typically end-users visiting these compromised websites, making the attack vector both broad and targeted in terms of user behavior.
Enhanced Description
HookAds is a sophisticated malvertising campaign that leverages cheap ad space on low-quality ad networks often frequented by adult websites and online gaming sites. The campaign uses JavaScript-based redirects to steer users through decoy sites designed to mimic legitimate content like native advertisements or online games. These redirects ultimately lead to the deployment of the Fallout exploit kit, which attempts to install malware on the victim's device. The primary goal appears to be distributing malicious payloads, likely for financial gain or data collection purposes. HookAds operates discretely by using multiple layers of redirection and low-quality sites, making it harder to trace back to its origins.
Key Capabilities
MITRE ATT&CK Tactics
ATT&CK Techniques
Software / Tooling
Campaigns & Victims
HookAds operates campaigns that involve distributing malicious ads across multiple ad networks. The campaign's operational tempo is focused on volume, targeting users with high susceptibility to such attacks. Past operations have shown a preference for redirecting users through layers of decoy sites before deploying the exploit kit. Notable campaigns include those using adult content and online gaming sites as entry points.
IOC Patterns
Recommended Actions
Suggested Tags
Confidence Assessment
Confidence in the data is high for TTPs like malvertising and exploit kit usage. Limited information exists on the specific goals, targeting countries, or advanced capabilities beyond malware distribution. Additional intelligence gaps include detailed campaign timelines and exact geographic targeting patterns.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
0
Tactics