Online ads infected with a Trojan virus have been delivered to users of numerous high profile sites participating in Yahoo-owned Right Media’s online ad exchange, according to Web security firm ScanSafe.
ScanSafe reported that during a period beginning August 8th and lasting until early September, it saw a surge in the number of a Trojan-Downloader.VBS.Agent it was blocking. The virus was being unknowingly distributed by over 70 Right Media ad servers, which Scansafe estimates delivered up to 12 million infected ads in recent weeks. Myspace, Bebo, Photobucket and The Sun were among the sites carrying virus-laden ads.
Although declining an interview, a Right Media spokesperson issued a statement saying, “We became aware of a Trojan [advertisement] introduced into the Right Media Exchange by a member network. The ad has been identified as a high risk creative and banned from the exchange”.
The Trojan itself required no interaction from the user to infect their machine, meaning that insufficiently patched operating systems were vulnerable simply by browsing to a page containing the ads. The adverts were being delivered to Right Media’s network from a third-party ad server, which was rotating both legitimate and infected ads. The infected placements delivered a Flash file generating an invisible ‘iFrame’, which prompted the download of a Trojan executable file.
In a recent press release, Dan Nadir, vice president for product strategy at Scansafe said “this is another example of how legitimate ‘trusted’ Web sites can unknowingly host malware. Online ads have become a primary target for malware authors because they offer a stealthy way to distribute malware to a wide audience”.
On its Web site, Right Media describes how each newly uploaded creative is run through a series of 10 tests in order to detect malicious activity. ScanSafe suggested the infected ads were designed to distinguish between scanning servers and regular site servers, and to deliver to the former ads with no malicious code to avoid detection.
Right Med’s spokesperson did not discuss future plans to prevent future incidents of this nature, but said the ad exchange is “committed to finding ways of keeping this type of activity away from consumers and publishers”.
The use of online advertising as a delivery mechanism for malware appears to be a rising menace. A report released earlier this summer by the Finjan Malicious Code Research Center found a rise in the use of affiliate ad networks to infect computers with keystroke loggers and other malicious code.
They're arguably the most annoying video ad formats in existence, but soon they'll be a thing of the past, at least on YouTube.
On Thursday, Twitter reported its earnings for Q4 2016, and the results have raised questions about the company's long-term future.
From its $1.5 billion air cargo hub to its growing network of contract last-mile delivery drivers, Amazon is increasingly looking like a logistics company; but shipping and logistics giant FedEx isn't sitting idly by.
Havas Group's Meaningful Brands report delivers sobering news for brands: consumers wouldn't care if 74% of the brands they use disappeared off the face of the earth.