‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
www.wired.com
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
  • chagall@lemmy.worldOPEnglish
    10·
    10 days ago

    I saw the domain before you edited it lol. I went to the site and have zero ads on mobile, although I did have an empty placeholder in one spot where the ads would have been.

    Make sure the following domains are blocked on your pihole:

    html-load.cc
githack.com
cdn.statically.io
revcontent.com
pub.network

    Then, make sure you have these two lines as entries on your mobile adblocker:

    /ad-shield/e/*$script,third-party
/cdn-cgi/zaraz/*

    If there is a specific url you’d like me to look at, feel free to message me.

    Edit to add: even better than the individual domains, to add https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.txt as a list and then just include the githack.com domain. Pihole supports adblock syntax, so you’ll be fine with this.

    • AgentSeven@lemmy.zipEnglish
      4·
      9 days ago

      I did this, and you’re right - no ads. 👍 Thanks a bunch, I’ve saved your comment so if I run into one of these again I may hit you up!

      • chagall@lemmy.worldOPEnglish
        3·
        9 days ago

        Thanks for taking the time to let me know it worked for you! I like helping people so this made my day!

    • ScoffingLizard@lemmy.dbzer0.comEnglish
      2·
      9 days ago

      Edit: Do not click on tracker links below.

      Looks like cdn-statically.io has not yet been added to any of the big block lists I use, but I found it in my DNS logs from today. Good catch! I didn’t find githack.com or revcontent but added them to block, and it looks like pub.network and html-load.cc are on the big blocklists and getting blocked. Thank for the tips.