Your Privacy Matters

We use cookies to enhance your experience on our site and to support our marketing efforts. Please view our Privacy Policy for more information.

Manage Preferences

Active Threats - Feb. 2024 - ScamClub Update

Posted

February 26, 2024
Summary

Follow on to our update on November 29, ScamClub continues to infect the ad ecosystem. We continue to see attacks coming through on-page integrations like video players and commenting widgets. Since we first detected this threat we have continued to block this threat at a high rate and based on our data this threat builds new signatures every 2-3 days.  

Assessment

ScamClub is back with a new method of attack. The latest ScamClub threats have evolved to targeting on-page video integrations. We commonly see attacks coming through Connatix, Disqus, Taboola and Vidazoo (for an exhaustive list, contact your account manager or email Support@boltive.com).

Landing Page Screenshots
Malicious Tactics Used

ScamClub has been using similar tactics to what they have used in the past. Based on our observations, ScamClub has considerably reduced its redirect payloads and removed most AQV checks in order to avoid detection while significantly increasing their volume.

Affected Platforms

Display/video on desktop and mobile

Conclusion

Though some believe that the ScamClub threats have been completely thwarted in the past, ScamClub attacks will not back down from a challenge. As a threat actor, ScamClub has and will continue to evolve.

Contact the Boltive team to best prepare for attacks like these. As a client, please contact your account manager. As a prospective client, click here and our team will follow up with you.

Subscribe to our Newslettter

Subscribe to our Newslettter

Previous Post
Next Post

No More Posts...

We're fresh out of content!

You're all caught up!

All the news that's fit to print.