Cybercriminals are taking advantage of the COVID-19 crisis to profit from the unfortunate situation. We have recently discovered cybercriminals adjusting their malvertising campaigns to adapt their malicious ads, making them relevant to the COVID-19 crisis. The bad actors purchase ad space from an ad network to display malvertising, malicious advertisements, on websites. They are now using website names appearing to host information related to the coronavirus, and therefore giving ad network operators the impression they are non-malicious. This particular malvertising campaign hosts an exploit kit called Fallout, which attempts to exploit vulnerabilities in older versions of Internet Explorer, doing so without user action or awareness that anything is happening, in order to install Kpot v2.0, an information/password stealer.
