
Fireball – Chinese malware that has infected over 250M computers worldwide - suresh70
http://blog.checkpoint.com/2017/06/01/fireball-chinese-malware-250-million-infection/
======
campuscodi
If the 250 million stat looks impressive, it's not. There is no malware named
Fireball, so don't go checking for IOCs and reports. This is just the name
Check Point has taken upon itself to giving to a collective of adware families
created by the Chinese company named in the report.

You'll find that Fireball consists of adware variants like Youdoo, Trotux,
Startpageing123, Luckysearch123, Hohosearch, Yessearches, and others.

------
based2
ref [https://www.heise.de/newsticker/meldung/Check-Point-
Bericht-...](https://www.heise.de/newsticker/meldung/Check-Point-Bericht-
Gefaehrliche-Backdoor-in-jedem-zehnten-deutschen-
Unternehmensnetz-3732893.html)

------
DamonHD
Lost me at "Try to imagine a pesticide armed with a nuclear bomb."

Try to imagine avoiding hyperbole and scaremongering...

All round a fairly sloppy piece, sadly.

------
mcraiha
_" The fake search engines include tracking pixels used to collect the users’
private information"_ AFAIK tracking pixels can only collect info from HTTP
headers. So is that line FUD or am I missing something?

~~~
jacquesm
That depends on what's served. If the first part that is served is a chunk of
javascript you can lift anything you want out the js environment and send that
back when you fetch part II.

