THE MASSIVE, HIDDEN INFRASTRUCTURE ENABLING BIG GAME HUNTING AT SCALE

Summary from the TLDR InfoSec newsletter

Advertisers use Traffic Distribution Systems (TDSs) to direct potential customers to highly targeted ads. Insikt Group has been tracking how cybercriminals utilize malicious TDSs to direct victims to the malware with the highest likelihood of success against the target. Insikt Group has identified a TDS known as TAG-124 that is used by multiple threat actors, such as the Rhysida Ransomware-as-a-Service operation, Iterlock Ransomware, and TA866/ Asylum Ambuscade, but notes that TDSs are hard to defend against because they occur so early in the cyberattack life cycle.