Steganography Based Ad Payload That Drops Shlayer Trojan on Mac Users

Re:Steganography Based Ad Payload That Drops Shlayer Trojan ... by ChrisSD on Thursday January 24, 2019 @12:20PM (#18990653)

Well the impact is to persuade you to download and run a file. I think most people on HN will be savy enough not to do that... even if it does claim to be a Flash update.

As others have noted this issue is more about the lax security of ad networks (and their sub networks). Rather than introducing real security, most major ad networks play a cat and mouse game with malware.

[ Parent | on HN ]

Re:Steganography Based Ad Payload That Drops Shlayer Trojan ... by paultopia on Thursday January 24, 2019 @12:25PM (#18990709)

Especially if it claims to be a Flash update! What's the intersection of StillUsesFlash & ReadsHN? It's gotta be the empty set at this point, right?

Which, come to think of it, is a great way to screen malware---anyone who will run a flash update probably thinks they need it to get their AOL e-mail, and will happily take the forthcoming call from Apple's Tech Support (TM) asking them for their password and SSN.

[ Parent | on HN ]