Operation Fingerprint:

A look into several Angler Exploit Kit malvertising campaigns


Malicious advertising, also known as malvertising, has become the best method to distribute malware on a global scale with surgical precision.

Simply put, malvertising is a means to expose innocent users visiting legitimate websites to malware. It uses a rogue advertisement (a banner ad) on the website to redirect the victim to a malicious payload, often delivered via an exploit kit.

This research provides a unique insight into malvertisers’ thought processes, showing how they remain one step ahead while the ad industry tries to avoid playing Whack-a-Mole.


  • 42% of infections happened in the U.S.
  • Over 100 fake advertiser domains
  • Hundreds of goo.gl URLs used in malicious redirections
  • Booby-trapped GIF images hiding code with on-the-fly encoding

Free download

Malwarebytes Endpoint Protection

Protects your endpoints with next-gen tech that out-thinks malware and traditional security.

Malwarebytes Incident Response

Centralized threat detection and remediation. Responding to incidents when seconds matter.