Our security team profiles the actors exploiting and scamming users through digital advertising. This portal is how we hand that intelligence to people outside of ad tech, in three parts.
Threats is who and how. Cloaking Kits is what hides them from scanners. Sightings — coming soon — will be where they are running right now, week by week.
Three ways to explore the data, and they cross-link: a sighting names the actor and the kit behind it, a kit lists the actors seen using it, and every actor maps back to the techniques in the matrix.
The Malvertising Attack Matrix: advertising's worst threat actors mapped against the tactics and techniques they use, from initial access through to impact. Filter the matrix by actor, or read the technique reference.
Open MatrixThe commercial services and self-hosted panels that decide whether a visitor sees the ad or the scam. Profiles of each kit, what it does to traffic, which actors have been seen using it, and what defenders can look for.
Browse KitsA running log of persistent threats seen on specific ad platforms, updated weekly. Every entry carries a status; the ones that are live right now stay pinned to the top until they go quiet or get mitigated.
Coming soon
