{"id":10864,"date":"2017-12-15T16:10:07","date_gmt":"2017-12-16T00:10:07","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/12\/15\/news-4636\/"},"modified":"2017-12-15T16:10:07","modified_gmt":"2017-12-16T00:10:07","slug":"news-4636","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/12\/15\/news-4636\/","title":{"rendered":"Exosrv.com, an ad server for adult sites, tops Malwarebytes detections"},"content":{"rendered":"<p><strong>Credit to Author: Malwarebytes Labs| Date: Fri, 15 Dec 2017 23:30:17 +0000<\/strong><\/p>\n<p>There is a belief that most of what you&#8217;ll find on adult websites is going to harm your system. In many cases, this has proven to be true, but overall the adult industry has made numerous efforts to protect their customers and audience. While we would like to tell you that it&#8217;s completely safe to surf adult websites these days, we do still need to stay vigilant. That&#8217;s why Malwarebytes has started blocking two new domains that are ad servers often seen in adult traffic:<\/p>\n<p><em><strong>*.exosrv[.]com<\/strong><\/em><br \/> <em><strong>*.exdynsrv[.]com<\/strong><\/em><\/p>\n<div id=\"attachment_20917\" style=\"width: 482px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/detection.png\" target=\"_blank\" rel=\"noopener\" data-rel=\"lightbox-0\" title=\"\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-20917 size-full\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/detection.png\" alt=\"\" width=\"472\" height=\"289\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/detection.png 472w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/detection-300x184.png 300w\" sizes=\"auto, (max-width: 472px) 100vw, 472px\" \/><\/a><\/p>\n<p class=\"wp-caption-text\">What you are likely seeing when you are doing some adult&#8230;research.<\/p>\n<\/div>\n<p>The reason why we are preventing traffic to any of those hostnames is based on reports from our customers\u00a0of malicious redirects and fraud, and our own collection tools\u2014and has nothing to do with the fact that these are sites serving porn. For example, here is a redirection from <em>main.exosrv[.]com,<\/em> which takes users to a fake online pharmacy website:<\/p>\n<p> <a href=\"https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2017\/12\/exosrv-com-ad-server-adult-sites-tops-malwarebytes-detections\/#gallery-20913-1-slideshow\">Click to view slideshow.<\/a> <\/p>\n<p>Here at Malwarebytes, we do our best to protect users by blocking not just malicious sites, but also scam sites, with fake pharmaceutical sites being one of the most common we encounter. Due to this, ads.exosrv[.]com has become our top malicious URL detection, totaling over 4 million blocks in one day, which is due to the <a href=\"https:\/\/www.similarweb.com\/website\/exosrv.com#overview\" target=\"_blank\" rel=\"noopener\">huge amount of traffic<\/a> the main domain receives.<\/p>\n<div id=\"attachment_20916\" style=\"width: 607px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/stats.png\" data-rel=\"lightbox-1\" title=\"\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-20916\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/stats.png\" alt=\"\" width=\"597\" height=\"480\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/stats.png 1226w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/stats-300x241.png 300w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/stats-600x483.png 600w\" sizes=\"auto, (max-width: 597px) 100vw, 597px\" \/><\/a><\/p>\n<p class=\"wp-caption-text\">Breakdown of blocks for this domain by country<\/p>\n<\/div>\n<p>Our goal at Malwarebytes continues to be the protection of our users, which is why we are taking an aggressive approach on blocking certain ad networks stepping over the line. Visiting adult sites is perfectly legal. Getting scammed on account of it is not.<\/p>\n<h3>Stay safe<\/h3>\n<p>Beyond keeping an up-to-date security solution installed on your system (like <a href=\"http:\/\/www.malwarebytes.com\" target=\"_blank\" rel=\"noopener\">Malwarebytes<\/a>), it&#8217;s advised to do the following when surfing <em>any<\/em> website:<\/p>\n<ul>\n<li>Utilize an ad blocker to keep malicious advertisements away from your system.<\/li>\n<li>Utilize a script blocker to keep malicious scripts from running in your browser. (Many ad blockers do this, too.)<\/li>\n<li>Utilize safe or private browsing tools so less of your personal information is provided to websites.<\/li>\n<li>Keep some kind of anti-exploit technology running in the background to prevent drive-by exploits from infecting your system. Malwarebytes also has this functionality baked into it.<\/li>\n<li>Don&#8217;t follow the white rabbit! Visit websites that are known and trusted, have high reviews and\/or are easy to find. The worst stuff online usually won&#8217;t be found by clicking on a Google link.<\/li>\n<\/ul>\n<p>Thanks for reading!<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2017\/12\/exosrv-com-ad-server-adult-sites-tops-malwarebytes-detections\/\">Exosrv.com, an ad server for adult sites, tops Malwarebytes detections<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2017\/12\/exosrv-com-ad-server-adult-sites-tops-malwarebytes-detections\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Malwarebytes Labs| Date: Fri, 15 Dec 2017 23:30:17 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2017\/12\/exosrv-com-ad-server-adult-sites-tops-malwarebytes-detections\/' title='Exosrv.com, an ad server for adult sites, tops Malwarebytes detections'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/12\/shutterstock_501098275.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>Learn why Malwarebytes is blocking exosrv.com, an ad server for adult sites. Hint: it&#8217;s not because it&#8217;s porn.<\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/malwarebytes-news\/\" rel=\"category tag\">Malwarebytes news<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/ad-fraud\/\" rel=\"tag\">ad fraud<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/ad-networks\/\" rel=\"tag\">ad networks<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/adult-sites\/\" rel=\"tag\">adult sites<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/malicious-redirects\/\" rel=\"tag\">malicious redirects<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/malvertising\/\" rel=\"tag\">malvertising<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2017\/12\/exosrv-com-ad-server-adult-sites-tops-malwarebytes-detections\/' title='Exosrv.com, an ad server for adult sites, tops Malwarebytes detections'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2017\/12\/exosrv-com-ad-server-adult-sites-tops-malwarebytes-detections\/\">Exosrv.com, an ad server for adult sites, tops Malwarebytes detections<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[10499,16988,16989,16990,10531,10546],"class_list":["post-10864","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-ad-fraud","tag-ad-networks","tag-adult-sites","tag-malicious-redirects","tag-malvertising","tag-malwarebytes-news"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/10864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=10864"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/10864\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=10864"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=10864"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=10864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}