Malicious JavaScript circulating in ad networks that serve over 50 percent of the Web can open the door to malware, without even clicking on the ad.
Internet security software and common sense can steer you away from the some of the Web’s skeeviest destinations to avoid malware, but when it’s embedded in ads from some of the biggest advertising networks out there, you may be looking at infection at every turn.
According to Avast, a manufacturer of antivirus software, major ad networks affiliated with Yahoo, Fox and Google have been distributing “poisoned ads” containing malicious code. The so-called JS:Prontexi attack uses JavaScript that can open the door to malware attacks and zero-day exploits, all without clicking on anything.
Because the infected networks serve more than 50 percent of all online advertising, poisoned ads have appeared on major sites including The New York Times, TechCrunch and Drudge Report.
This isn’t the only outbreak of a computer virus spread through advertising. “The poison ad infiltration method is growing in popularity because it does not require users to click on anything,” said Avast virus analyst Jiri Sejtko, in a statement. “Users can get infected just by reading their favorite newspaper or by doing a search on popular topics; the infection begins just after the poisoned ad is loaded by the browser.”
Showing 12 comments
RSSWe ended up turning AdBrite off and have stuck with just google ads since then but if the ad networks cant stop them then how are we as content providers supposed to solve this problem?
I personally cannot, and have never been able to, understand how ads aren't considered flat out malware in and of themselves. There are ads nowadays that will simply prevent you from looking at a website unless you are willing to expose yourself to any kind of malicious code - you literally cannot get the content without the security breach. How much longer until we as a species realize that advertising of such nature is WRONG?
I would liken it to driving down the street, and having a banner ad on a bus stop that requires you to read it, and send a text to the company, before the light will change for you to continue. And lawmakers are siding with the advertising agencies behind it all - follow the money!
Lou
www.ultimate-privacy.net.tc