On April 16, 2016, an army of bots stormed upon Wix servers, creating new accounts and publishing shady websites in mass. The attack was carried by a malicious Chrome extension, installed on tens of thousands of devices, sending HTTP requests simultaneously. This “Extension Bot” has used Wix websites platform and Facebook messaging service, to distribute itself among users. Two months later, same attackers strike again.

by Tomer Cohen

Full Abstract & Presentation Materials:
https://www.blackhat.com/us-17/briefi...