Threat Intelligence Alert: Merry-Go-Round Conceals Ads from Users and Brands
Essential information
- Published
- 31/05/2024 13:45
- Modified
- 31/05/2024 14:03
- Tags
- 2024-05-31 click hijacking
- Related entities
- 13 observables, 4 techniques (mitre)
Description
HUMAN's Satori Threat Intelligence and Research Team uncovered an ad cloaking operation, dubbed 'Merry-Go-Round', which involves two independent rings of websites that redirect traffic among each other in pop-under tabs, racking up digital ad impressions concealed from users. This sophisticated operation uses overlays to hijack mouse clicks, launch pop-unders, and cycle through domains, requesting numerous ads while hiding the fraudulent activity from brands and advertising partners through domain cloaking techniques.