back to article Game of P0wns: Malvertising menace strikes Pirate Bay season six downloads

Scores of Game of Thrones pirates may have had computers encrypted by ransomware after malvertisers served the dangerous malware through the Pirate Bay during the mega-series' season six première last weekend. MalwareBytes researcher Jerome Segura says the hard-working Magnitude exploit kit authors were able to target pirates …

  1. Jamesit

    A note the ad vendors: CLEAN UP YOU NETWORKS!

    The way you are running ads make it unsafe to surf without an ad/script blocker.

    1. Kanhef

      I suspect the ad networks' inaction is a deliberate strategy, even though poisoned ads have been a known problem for years. As long as they act as a neutral host without filtering anything, they can claim they're not liable for anything that happens. If they try to block bad ads, they could be blamed for anything that they don't catch.

      Corporate lawyers can suck snozzberries.

    2. Adam 52 Silver badge

      According to the linked report The Pirate Bay uses trafficholder as its Ad network. They are a specialist interest provider, so this isn't really an appropriate criticism of a more mainstream product like Google. I don't know if that's because the more mainstream networks refuse to work with pirates or just a commercial call.

      End users don't know, of course, which is an issue but the general principle is the dodgier a site (and the cheaper the Ad placement) then the more likely dodgy Ads are.

  2. Charlie Clark Silver badge

    Is it just me or is this article largely incomprehensible? Yes, I understand that malfeasants are placing nasty scripts on torrent sites that, if successful, can encrypt machines and demand ransoms. Was there anything else in all the rambling?

    1. Vic

      Was there anything else in all the rambling?

      Just one thing - "use an ad blocker".

      Vic.

    2. Anonymous Coward
      Anonymous Coward

      We could use more specifics in these kinds of articles Reg team....

      The Reg isn't the BBC is it? Sometimes it feels like it... I get friends / family asking about these things all the time. But I don't know anymore than what they've read on Beeb! Seems like an opportunity lost for both of us. Can you include more details if they're available please Reg Editors... ? For example:

      * Any info on which Browsers are more affected?

      * Are those with Flash set to Click-To-Run protected?

      * Is 'Hosts' file blocking of major Ad networks better protection?

      * Is Silverlght infection limited to M$ offerings like IE & Edge?

      1. Anonymous Coward
        Anonymous Coward

        Re: We could use more specifics in these kinds of articles Reg team....

        Also which website(s) exactly was the malware served from? Thanks to court ordered blocks, we may no longer use the original TPB to download *ahem* Linux distros, but one of its dozens of mirrors. Have all of them been infected as well?

    3. Preston Munchensonton

      Was there anything else in all the rambling?

      You mean like this?

      NSFOCUS IB chief research analyst Stephen Gates says the malvertisers may be exploiting Adobe Flash Player (CVE-2015-7645, CVE-2015-8446, and CVE-2015-8651) and Microsoft Silverlight (CVE-2016-0034) vulnerabilities.

      I also wish that the article contained a better, technical explanation of what's going on. But I got the impression that no one knows for sure the sorts of details being asked here by so many.

      1. Anonymous Coward
  3. Pascal Monett Silver badge

    "targeting users with pop-under ads"

    Once again, ad blockers and NoScript actually make the Web safer.

    1. Paul Crawford Silver badge

      Re: "targeting users with pop-under ads"

      As does removing Flash and Silverlight.

      On can hope, but sadly one also suspects that HTML5 will rapidly acquire enough complexity to bring the risk right back to square one.

  4. Stevie

    Bah!

    Winter is coming.

    1. BurnT'offering

      Re: Bah!

      Is that codename for a new Silverlight release?

  5. Aodhhan
    Devil

    Hackers targeting thieves... who would've guessed?

    I'm waiting for the conspiracy posts; accusing TV/Movie studios financing the advertisements.

    Better yet, TPB is teaming up with TV/Movie studios to drop malware so the studios don't sue or attack TPB in any way.

    What do you expect when you go to any download site? If you're not expecting to get attacked by the site or application, then you're naïve. There is a reason why MD5 hashes are published.

    Better patch your systems and ensure you have an ad/script blocker...

    I think you can download them from Pirate Bay!!! :)

  6. paulc

    the trick...

    is to view the pirate bay via a proxy and a browser that enables you to strip this rubbish out... and also not use Windows...

  7. OchaiThenoo

    Use protection

    Linux guest VM on a Linux host, Firefox + Adblock Plus and NoScript. Sorted.

    Game of Thrones? Yep downloaded. When the box set becomes available at season's end I'll add that to the collection.

    Pirate, thief? WGAS

  8. John Brown (no body) Silver badge

    Where's our ad industry rep when you need him?

    Lets see the staunch defence of the ad industry in the face of reports of "malvertising", especially bearing in mind that this not an isolated incident and not limited to the "darker" side of the net.

    1. Vic

      Re: Where's our ad industry rep when you need him?

      Lets see the staunch defence of the ad industry

      He's busy on the downvotes...

      Vic.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like