RedTube Fixes Malware Security Breach

BURBANK, Calif. — RedTube announced this week via Twitter that it fixed a bug on its adult tube site that redirected users to malicious URLs and exposed them to Trojan horse viruses.

The highly trafficked MindGeek-owned property apparently was hacked via a malicious HTML iframe placed directly in the source code of the site and made invisible to the user.

The source code on RedTube's main page was modified in order to redirect the user to malicious URLs hosting the Angler Exploit Kit, according to security blog MalwareBytes, which first discovered and reported the breach. 

Once redirected, the software kicks in and tries to exploit Adobe's recently patched CVE-2015-0313 bug to run malicious code, MalwareBytes said.

Officials of MindGeek’s RedTube division, in a response to MalwareBytes, said that the attack occurred this past Sunday for a “brief period of time.”

“Our security systems immediately detected the breach, and we took direct action to rectify the situation in order to protect RedTube users,” MindGeek told MalwareBytes.

“RedTube pursues stringent privacy requirements and maintains the highest industry standards of privacy protection to secure not only their assets and properties, but to provide comprehensive protection of their customers’ data when visiting a RedTube-owned site.  

"RedTube is committed to providing their customers with an optimal online experience and the peace of mind when they are accessing a RedTube site.”

According to reports, RedTube is not the only adult tube site to have fallen victim to malware in recent months.

Another site, xHamster, was said to be serving up a Flash file that exploited a flaw via a malicious advertisement.

Related:  

Copyright © 2025 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More News

TeamSkeet, MYLF to Launch New Website FamilyStrokes.com

Sister studios TeamSkeet and MYLF are launching a new website, FamilyStrokes.com.

Age Verification Watch: Mainstream Exposure, Ofcom Sets a Date

Industry stakeholders and free speech advocates have anxiously been awaiting the Supreme Court’s decision in Free Speech Coalition v. Paxton, which could significantly impact state age verification laws around the country. In the meantime, state legislatures continue to weigh and pass AV bills, AV tech providers continue to tout their services, and legal challenges continue to play out in the courts — with some cases on hold pending the SCOTUS ruling in Paxton.

Segpay Names Kristi Greer VP of Sales

Segpay has promoted long-time employee Kristi Greer to the position of vice president of sales.

BranditScan Names Subgirl Newest Brand Ambassador

BranditScan has named content creator Subgirl its newest brand ambassador.

Arcom Reports Age Verification Enforcement Actions Against 5 Adult Sites

French media regulator Arcom released a statement Tuesday detailing recent actions to enforce age verification rules as set forth under France’s Security and Regulation of the Digital Space (SREN) law.

Pineapple Support, Clips4Sale to Host Performers' Partners Support Group

Pineapple Support and Clips4Sale are hosting a free online support group for partners and family members of adult industry professionals.

FSC Mourns the Loss of Board Director Emeritus Mark Kernes

Free Speech Coalition has released a statement regarding the passing of Board Director Emeritus Mark Kernes.

Alexa Creed Launches New Paysite

Creator Alexa Creed has launched a new membership site through MyMember.site.

Choice Talent Management Launches Fan Platform 'ChoiceFilmz'

Choice Talent Management CEO Chris Crisco has launched a new fan platform called ChoiceFilmz.

Dredd to Launch Official Site

Dredd has announced his new website OfficialDreddXXX.com, launching April 20.

Show More