Netskope Threat Labs

Parrottds

ATP Sandbox Adv. Heuristics

Parrot TDS is a JavaScript based traffic direction system that has infected websites since 2019 and redirects traffic to various malicious locations. The script decides where each visitor goes based on campaign rules, sending users to phishing pages, scam sites, and malware downloads while hiding the true destination. Its operators sell access to the system as a service, which lets many criminal crews monetize compromised web traffic at scale.

First seen
August 2022
Last seen
October 2026
ParrotTDS
Alert Name
Document-HTML.Adware.ParrotTDS
Script-JS.Adware.ParrotTDS
Script-JS.Trojan.Parrottds