<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Malvertising on Alert Overload</title>
    <link>https://alertoverload.com/categories/malvertising/</link>
    <description>Recent content in Malvertising on Alert Overload</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Fri, 13 Nov 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://alertoverload.com/categories/malvertising/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Verizon Business Malvertising</title>
      <link>https://alertoverload.com/posts/2026/11/vzw/</link>
      <pubDate>Fri, 13 Nov 2026 00:00:00 +0000</pubDate>
      <guid>https://alertoverload.com/posts/2026/11/vzw/</guid>
      <description>&lt;h1 id=&#34;verizon-business-malvertising&#34;&gt;Verizon Business Malvertising&lt;/h1&gt;&#xA;&lt;h2 id=&#34;key-findings&#34;&gt;Key Findings&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Verizon Business Malvertising Campaign&lt;/li&gt;&#xA;&lt;li&gt;Actor subscription bombed victim to hide transaction details&lt;/li&gt;&#xA;&lt;li&gt;Fraudulent purchase order attempted on the Verizon Business account&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;overview&#34;&gt;Overview&lt;/h2&gt;&#xA;&lt;p&gt;Initial access began in September, when a user searched Bing for &amp;ldquo;Verizon Business&amp;rdquo;. This search led to a malicious ad serving a typosquatted domain that masqueraded as the Verizon Business account login page. The user entered their credentials on this page.&lt;/p&gt;&#xA;&lt;p&gt;In November, the user began experiencing subscription bombing events. Their inbox was sent thousands of emails from service providers, websites, and subscription services. These emails were sent to hide the emails from Verizon Business regarding account detail changes and transactions.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
