← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Thousands of Sites with Popup Builder Compromised by Balada Injector
Balada Injector campaign started infecting websites with older versions of the Popup Builder. The attack used a freshly registered (December 13) domain specialcraftbox[.]com. At the current time of writing PublicWWW detects the injection on over 6,200 sites.
MITRE ATT&CK & Malware Families