The Kyle and Stan malvertising network has compromised more than nine times as many domains as originally reported two weeks ago. Cisco said that 31,000 connections have been made to these domains, more than three times the 9,541 originally reported. The network has been able to drop ads on mammoth websites, including Amazon, and there are Windows and Mac OS X flavors of the malware. Each time a victim is compromised, a unique spin on the malware is dropped on the machine, each with subtle differences in how it s packed that result in a one-of-a-kind MD5 checksum.
Source: https://threatpost.com/kyle-and-stan-malvertising-network-nine-times-bigger-than-first-reported/108435/