MALWARE CAMPAIGN USING ARS TECHNICA HAD NOVEL ATTACK TO FLY UNDER THE RADAR

Summary from the TLDR InfoSec newsletter

Ars Technica and Vimeo were used to covertly serve malware via a novel attack hiding in image/video links. Payloads were disguised as Base64-encoded random strings. The first-stage infected devices and then fetched the strings, decoding them to install second-stage malware.