On November 12th & 13th — just two weeks ago — a malvertising scam was mistakenly boosted by a legitimate ad exchange, and as a result, over the course of just 48 hours, 300 million users were redirected to shady phishing sites, mostly adult sites and gift card scam sites. The group perpetrating the attack has been nicknamed “Scamclub” after their consistent domain names that end in “starclub.com,” and they developed a special code that evades malware detection.
