A malvertising campaign used poisoned ads on Skype to redirect its users to the Angler exploit kit.
The campaign leveraged ads posted on a number of other websites, including shopping sites, gaming forums, news sites, and online internet portals such as msn.com, to redirect users to a landing page for the Angler exploit kit.
The users directed towards Angler with TeslaCrypt ransomware.
Source: https://grahamcluley.com/skype-ads-angler-exploit-kit/
TPRM report: https://scoringcyber.rankiteo.com/company/skype
"id": "sky212810522",
"linkid": "skype",
"type": "Cyber Attack",
"date": "02/2016",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Technology',
'name': 'Skype',
'type': 'Communication Platform'}],
'attack_vector': 'Poisoned Ads',
'description': 'A malvertising campaign used poisoned ads on Skype to '
'redirect its users to the Angler exploit kit. The campaign '
'leveraged ads posted on a number of other websites, including '
'shopping sites, gaming forums, news sites, and online '
'internet portals such as msn.com, to redirect users to a '
'landing page for the Angler exploit kit. The users directed '
'towards Angler with TeslaCrypt ransomware.',
'initial_access_broker': {'entry_point': 'Poisoned Ads'},
'motivation': 'Financial Gain',
'ransomware': {'ransomware_strain': 'TeslaCrypt'},
'title': 'Malvertising Campaign Using Poisoned Ads on Skype',
'type': 'Malvertising',
'vulnerability_exploited': 'Exploit Kit'}