Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen Coje_He for the clue delivery! CTOnews.com, Sept. 29 (Xinhua) Microsoft began embedding advertising content in Bing chat in March to generate revenue to keep the project running. But this also opens the door for malware, many media and users feedback in the chat content, lead to jump links containing malware.

Microsoft will mark "Ad" ads on links in Bing chat, but in actual chat scenarios, users usually don't pay much attention to them, and some of the ads will lead to malicious software sites.

A sample of malware found by security company Malwarebytes, disguised as the mainstream "Advanced IP Scanner" utility, mentions the keyword in Bing chat and displays a malicious download link in the first link.

The malicious advertising campaign was created by a hacker who hacked into the advertising account of a legitimate Australian company and created two malicious ads aimed at system administrators (IP scanners) and lawyers (MyCase legal managers).

Clicking on a malicious advertisement in the IP scanner will take the user to a website (mynetfolderip [.] CFD) to distinguish between robots, reptiles and human victims by checking the IP address, time zone, and various system indicators of sandboxie / virtual machine.

The victim will be redirected to advenced-ip-scanner [.] Com website, which is a phishing website of Advanced IP Scanner.

The downloaded MSI installer contains three files, one of which is a highly confusing malicious script that connects to an external resource to retrieve the payload.

CTOnews.com is here to attach a link to the original report, which can be read in depth by interested users.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.