March Madness 2019: Streaming and Phishing Scams

Zscaler ThreatLabZ observed a malicious campaign exploiting NCAA tournament-related streaming searches and sites: phishing/adware pages and typo-squatted domains redirect users via obfuscated JavaScript to fake browser plugins, scareware, and fake Flash installers. The report includes behavioral analysis (JS obfuscation and redirect chains), sandbox/VT detection of malicious installers, and a set of domain IoCs to block and monitor.