Alert: Massive Web Ad Poisoning


Popular websites with millions of visitors are serving poisoned web ads.–PC Pitstop

Alert: Massive Web Ad Poisoning

By Stu Sjouwerman, for KnowBe4.com Security Awareness Training

The same cybercrime lowlifes that infected the Yahoo website a few weeks ago have struck again, this time infecting sites like Drudge Report and Weather.com. Both sites have hundreds of millions of visitors per month, and were serving poisoned web ads which either dropped CryptoWall ransomware or infected the PC with adware.

Internet users at the house, or employees who browse the web during their lunch break do not understand the mechanics of modern ad networks. Once an ad network is subverted, hundreds of millions of poisoned ads are displayed in real-time. Many of these ads initiate a drive-by attack without the user having to do anything. The attack does a few redirects, kicks in a U.S. and Canada-focused Exploit Kit which checks for vulnerabilities (usually in Flash) and infects the workstation literally in seconds.

What To Do About It

This is a hard one to defend against, because they hide behind an SSL to Microsoft’s Azure Cloud which makes it difficult to detect, but there are definitely things you can do. First of all, I would send this to your
users. Feel free to copy/paste/edit:

Scam of The Week Warning – you need to understand something about poisoned ads on websites which might infect your computer. Here is the situation in a nutshell: Advertisers do not sell their ads to websites one at a time. Websites that want to make money sell their advertising space to an ad network. Advertisers sign contracts with that ad network which then displays the ads on the participating websites. The ad network sits in the middle between the advertisers and the websites and manages the traffic and the payments.

And there is the problem.

Article Continued Here

43 total views, 1 views today

(Visited 8 times, 1 visits today)

8 thoughts on “Alert: Massive Web Ad Poisoning

  1. Hey I am a single user also. Just have a home PC. I inquired and the least they will cover is 5 computers, not just one. So I have been very happy to pay that amount for one cuz it beats the heck out of the others.The deal is that you can add others in the home, but they all have to be on the same address. Not a problem for me. I'm extremely happy !!! And it's American !!

  2. They only sell for five comuters at $50 a yerar for all five. I bought it over a year ago when they had a special for $100 for five comuters for life, never have to pay anything again.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.