Morphing ICEPick-3PC malvertising attack penetrates ad blocking defenses
This type of tactic is not new—ICEPick-3PC was first detected in October 2018, reaching significant mass in January 2019—but it has been changing throughout 2020 to evade detection and reach a broader group of users.
Key Learnings
- Attack vector change tactics to extend reach
- Changing domain patterns helped attack evade malware blockers at both ad tech providers and publishers
Recommendations
- Client-side scanning to detect evolving patterns
- Continuous updating of malware block list data
