The advertisement created an alert box with a concerning message that would redirect and download a malicious executable once the user clicked on 'OK'.

The malicious ad got delivered to millions of websites including Blitz, Reddit, The Verge….

A malicious advertisement unit got added to Google's advertisement platform.

We just want to quickly elaborate what and how it happened. Includes links to a write up from a security researcher. Read: Next champion theory: Faey? There's some evidence. However you can see the process of what the install looks like.

The URL used to download the file is no longer active. I however did find someone on the Blitz.gg Discord use any.run to run the file it downloads. If anyone wants any specific advice please feel free to ask with detail, that is much easier for me than trying to be vague and cover everything.Īfter attempting to reproduce this issue for a couple hours now, I have been unable to as I have not been served the ad in question. If anyone has downloaded this exe, I recommend uploading it to virustotal, seeing what scanners can identify it, and using that to clean it. If I am able to reproduce this issue, I will download the virus in a sandboxed environment and provide recommendations on what software can clean it. I also recommend running a malware scanner as well. If you click on the popup and install what it asks you to, please run any virus scanning software you have. Clicking that popup and installing anything is how you will get infected.

If you see any popup asking you to install/update electrum. Below I will be listing steps to take if you are impacted, and will be editing the post with more information as it comes out. This thread can be used to discuss the issue as it may impact people within the community. The issue appears to be related to ads hosted on it and other programs/sites. Recently there has been confusion about a potential crypto miner being installed with the Blitz.gg app.

Comment from discussion nstarz’s comment from discussion 'BlitzGG using your pc as a bitcoin miner?'.

Blitz app league of legends