Reuters Readers Redirected In Ad Network Attack

An attacker claiming affiliation with the Syrian Electronic Army phished credentials to compromise Taboola, an online ad network, and injected redirects that caused visitors to Reuters.com to be directed to an SEA-operated site; Taboola detected and mitigated the issue within roughly 35 minutes. The report highlights the use of ad-network supply-chain abuse, references prior SEA phishing campaigns against major news outlets, and notes that Taboola is investigating and has changed access credentials.