Our honeypots caught drive-by downloads that appeared to stem from Ameba, a popular Japanese blogging and social networking site.
Upon further review we found out that they came from a particular user page rather than the blog’s official homepage ameblo.jp, which is a good thing as it reduces the scope of the attack.
Let’s dig in and review the URLs involved in this infection
more here............https://blog.malwarebytes.org/exploits-2/2014/09/popular-japanese-blog-platform-affected-by-malicious-redirections/
Upon further review we found out that they came from a particular user page rather than the blog’s official homepage ameblo.jp, which is a good thing as it reduces the scope of the attack.
Let’s dig in and review the URLs involved in this infection
more here............https://blog.malwarebytes.org/exploits-2/2014/09/popular-japanese-blog-platform-affected-by-malicious-redirections/