Post by jojo on Oct 4, 2014 20:42:29 GMT
Last week we uncovered a large-scale malvertising attack involving Google’s DoubleClick and Zedo that affected many high-profile sites.
Unfortunately, another incident where DoubleClick is part of the advertising chain has happened again.
Upon our discovery we immediately notified Google so they could shut this down.
Although DoubleClick is not directly responsible, the publisher is trusting them to only allow ‘clean’ ads.
Many popular sites were caught in the cross-fire including examiner . com. The power of malvertising attacks is that they can be widespread in an instant by leveraging the advertising networks’ infrastructure.
Malicious ads are displayed to millions of visitors who do not actually need to click them to get infected.
Unfortunately, another incident where DoubleClick is part of the advertising chain has happened again.
Upon our discovery we immediately notified Google so they could shut this down.
Although DoubleClick is not directly responsible, the publisher is trusting them to only allow ‘clean’ ads.
Many popular sites were caught in the cross-fire including examiner . com. The power of malvertising attacks is that they can be widespread in an instant by leveraging the advertising networks’ infrastructure.
Malicious ads are displayed to millions of visitors who do not actually need to click them to get infected.
blog.malwarebytes.org/malvertising-2/2014/09/googles-doubleclick-ad-network-abused-once-again-in-malvertising-attacks/
I and a number of others have been affected by something like this, usually while visiting a forum site called Yuku. A general hijack, usually asking us to download an updated for Firefox, or which ever browser we happen to be using. Though by running Rkill, ADWcleaner then JRT, it's been sorted.
It's occurred to me that if it might be possible to block DoubleClick altogether, this and other problems could be solved. But that may make it impossible to load some pages.
Be interested in other's thoughts on this
