Yesterday I discovered a strange behaviour in the Chefkoch.de App. During the search for recipe,
Firefox opens up with a (German) phishing warning screen.
This happened not only on this specific recipe, but on almost every other recipe. My assumption is that it has something to do with the displayed ads. The AEG ad was one of the ads displayed during the issue.
Immediately after the attack I wrote an email to the developers. Today I got their answer, that this problem is not new to them, and they think it has something to do with Googles AdExchange service.
Today I tried to analyse the issue a bit more, but I wasn't able to recreate the issue again. I will update my Question with further information if I'll be able to recreate the issue.
- Has anybody knowledge on such attacks? (Google didn't help me.)
- How is it possible to create a browser intent, without user interaction, via ads?
- App Version 2.2.8
- Android Version: 5.1.1
- Device: Oneplus One
- User-Agent: Mozilla/5.0 (Android; Mobile; rv:40.0) Gecko/40.0 Firefox/40.0
- Time: 01.09.2015 17:10:48
Some latest research in this field showed an overall Problem of the advertising networks. https://blog.malwarebytes.org/malvertising-2/2015/09/large-malvertising-campaign-goes-almost-undetected/