Malvertising Attack Hijacks 300 Million Sessions Over 48 Hours over 48 hours. 57% of publishers working with top-5 ad exchange were impacted according to Confiants data. Click through URL for many of these campaigns was: play.google.com (google play app store) These campaigns were impersonating legitimate app download campaigns. The latest domain used in the scheme (luckstarclub.com) has been flying under the radar for weeks (not detected by either Google SafeBrowsing or VirusTotal)”]