#malvertising
-
JSCeal: Crypto Malware Hijacks Google Sessions and Spoofs Exchange Traffic
Researchers at Check Point have dissected JSCeal — a compiled JavaScript malware that steals browser cookies, bypasses Google authentication, and tampers with crypto-exchange traffic.
-
Malware Built Right in the Browser: How the SourTrade Campaign Works
Researchers at Confiant have described a large-scale advertising campaign in which malicious JavaScript makes the victim's browser “assemble” the malware from separate components on its own, right in memory.