Filed under: Security, Google, Yahoo!
Google and Yahoo banner ads delivering trojans
Users who clicked on booby-trapped banner ads served by Google's DoubleClick and a Yahoo-owned service called Right Media ended up having their machines infected by a trojan, according to a report from The Register. The sneaky ads showed up on the Drudge Report, Lyrics.com, slacker.com and horoscope.com. Google says that publishers who use DoubleClick have to approve the banner ads that show up on their sites, implying that these four sites are at fault for the attack on their users. The trojan itself was installed via an infected PDF file that opened and closed when a user clicked an ad. It's called Win32/Alureon, and it opens backdoor access to infected machines. This is serious business, and it's hardly the first time we've seen "malvertising," but who's to blame when it happens? Should site owners who buy ads have to scan them first, or should the big ad networks be responsible?
I don't know if this is a labor of love or merely the brainchild of four very gifted games designers, but Level Up is a really weird mash-up of gaming elements that you have probably never seen in a Flash game before.
Let's start with the premise itself: Groundhog Day meets Memento. The game experience revolves around 'days': you explore the world and the clock slowly ticks towards the evening. You bounce around picking up gems and talking to the denizens of 'Level Upland'. Eventually you feel tired and head back to ...
Reader Comments (Page 1 of 1)
Eric H said 2:09PM on 9-28-2009
Blaming the site that serves them is like blaming Walmart for all the lead paint toys and toxic cat food from China.
Reply
Jason Shelbrock said 2:21PM on 9-28-2009
exactly! which is why we don't buy these products from Wal-Mart, we go somewhere else... at least until we are certain the problem is resolved.
dipal said 3:19PM on 9-28-2009
anyone dumb enough to click on banner ads deserves a virus
Reply
lsydexick said 2:19PM on 9-28-2009
Yet another good reason to install the Adblock plus add-on for firefox...
Reply
Christian said 2:49PM on 9-28-2009
I actually just hovered over an Ad and it all of a sudden got my anti-virus warning me of a trojan... and it's a legitimate site too! It's obvious to blame the main site since they should know if their products are clean, but if it's something they get automated then I think it should be the ad network who should be to blame.
Reply
Eric H. said 3:48PM on 9-28-2009
Ultimately a site's owner is responsible for the content of that site. Therefore a site should be responsible for any problematic advertising that appears on that site. The Television networks are certainly responsible for any advertising that appears on their channels, not the advertiser that makes the advertising. Why should websites be treated any differently.
If you do not want to use an advertising service because you will not have the option to approve all advertisements that might appear on your site, well choose a different advertising service. No one is forcing anyone to use doubleclick.
Reply
Fred Thompson said 1:33AM on 9-29-2009
@Eric H,
You are confusing the creator of the content with the delivery of content. A book store is not responsible for the content of the books they sell...in the overwhelming majority of cases. It is a crime, in the United States, to sell pornography to minors WHEN the vendor knows it is a restricted item, for example. In the case of advertising banners, the content of the banner is not subject to review by the site owner nor do they distribute it. The delivery medium is not a "public asset" so the requirement for review by the site owner is less than that of a radio or TV station using "public airwaves" for distribution.
Saint Seminole said 5:53PM on 9-28-2009
I honestly didn't know people clicked on internet ads... Wow. Oh wait, I saw a character in a movie do it once.
Reply
cmsb55 said 9:25PM on 9-28-2009
Just one more reason to stay off the Drudge Report...
Reply
Chester Wisniewski said 1:08PM on 9-29-2009
I attended Virus Bulletin last week and saw Eric Davis of Google's anti-malvertising team do a presentation on the difficulties and techniques Google uses to try and protect customers from this type of fraud. It is a difficult problem, and if I am not mistaken, the malicious ads on Google's service last week were "swicthed out" after publication. This means if the consumers of their advertisements vetted them at the time they were posted, they were non-malicious. It's not as easy as it looks on the surface.
Chester Wisniewski
Senior Security Advisor
http://www.sophos.com/blogs/chetw
Reply
Alan said 7:15PM on 9-29-2009
It's the advertiser's fault, not the website serving the ad. If I sell tires and Goodyear manufacturers defective tires, then I blame Goodyear.
Reply
fightlinker said 12:50AM on 10-03-2009
I run a website and one of the biggest issues when trying to find an ad network is finding one that will be accountable if ads come up with viruses or hijacks ... it's not only an issue for the time the ads are served ... there's also the horrific possibility of google putting you on a list of 'attack sites', and of course once you're on this list you're pretty much frucked.
Reply