Maladverts hit Microsoft and Google sites

Powered by SC Magazine
 

Backdoor programs installed on victims' computers.

Malicious hackers infected Google and Microsoft's online advertising networks last week, according to security firm Armorize.

When clicked on, the "maladvertisements" redirect users to rogue sites that exploit flaws in Adobe Reader, Java and other PC software to install backdoor programs, giving the hackers control of the victims' PCs, Armorize said.

The sites display a dialogue box informing the visitor that malware had been detected and provided a link to the HDDPlus website. This is a known fake optimisation tool which is a trojan fronting the malicious software.

Armorize said that once the visitor arrived at the site they were immediately infected so that even rebooting would not remove the warning dialogue.

This vulnerability is known, so anyone with up-to-date antivirus products should be secured.

The first attack occurred on December 5 and lasted for a few days. Google said that it had experienced some issues with the DoubleClick Ad Exchange that it uses. The company claims that the ads were identified and blocked “within seconds”.

Microsoft may have been affected more severely as several reports indicate that malicious ads were found on the LiveMail (formerly Hotmail) site.

The 'maladvertisers' used a new trick by showing their ads as being from AdShufffle – which adds an extra ‘f’ to the acceptable AdShuffle domain. Even so, it reveals a weakness that should not have been there and the ads should not have been accepted, security analysts said.

“If anyone was going to be on top of such issues, we would hope it would be Microsoft and Google,” commented Bob Tarzey, analyst and director of Quocirca. “It is not 'just one of those things'; there is a lot at stake, if the biggest web brands are not able to protect themselves, who can?

"Google and Microsoft need to take urgent action here. There is still a disproportionate underspend on web advertising, so there is lots of upside, but to tap that confidence in the web-mega brands needs to be maintained. This is especially an issue for Google, which is still very heavily reliant on revenue from click through ads.”

It seems that Google’s DoubleClick team are on the ball, however. Huang said, “We reached out to DoubleClick and in less than a few hours' time they arranged a meeting with a group of their experts on anti-malvertising and incidence response. We were very surprised and impressed with the speed that DoubleClick acted. We provided details, and DoubleClick said they were already on top of the issue.”

Mirosoft said it, too, will seek information from Armorize.

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


Maladverts hit Microsoft and Google sites
 
 
 
Top Stories
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
Telstra hands over copper, HFC in new $11bn NBN deal
Value of 2011 deal remains intact.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Xero prepares for key feature coming in 2015
Dec 19, 2014
Xero users will be able to track how their business is comparing to other Xero users.
More 4G from Optus in Darwin
Nov 21, 2014
Click to see where Optus has expanded coverage to the suburbs near Darwin.
Optus steps up regional 4G coverage
Nov 20, 2014
Once 700Mhz services are working, Optus claims regional users will have a "faster and more ...
This Huawei 4G phone costs $99
Nov 12, 2014
The $99 Huawei Ascend Y550, available through Vodafone, enters the budget market as one of the ...
4G smartphones: Microsoft's Lumia 830
Nov 7, 2014
Microsoft has announced its flagship Windows Phone, the Nokia Lumia 830 4G, will be available in ...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  39%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1785

Vote
Do you support the abolition of the Office of the Information Commissioner?