Sign1 Malware
Summary
A previously unknown malware operation named Sign1 has successfully infiltrated more than 39,000 websites within six months, resulting in visitors being bombarded with unwanted redirects and popup advertisements. This malevolent code conducts checks for specific referrers and cookies before activation, primarily targeting visitors from prominent platforms such as Google, Facebook, Yahoo and Instagram, while lying dormant in other instances. Subsequently, the script redirects visitors to fraudulent sites, such as counterfeit captchas, designed to deceive users into enabling browser notifications. Experts caution that Sign1 has undergone a notable evolution over the documented six months of the campaign, with infections peaking upon the release of new versions of the malware. To protect their sites against the attack campaigns, companies are advised to use a strong/long administrator password and update their plugins to the latest version.
Classifications
AskAI Classifications
LabelsLinked Companies
