Maladverts hit Microsoft and Google sites
Malware hackers have attacked two of the largest websites with drive-by exploits.
Malicious hackers infected Google and Microsoft's online advertising networks last week, reports security firm Armorize.
When clicked on, the "maladvertisements" redirect users to rogue sites that exploit flaws in Adobe Reader, Java and other PC software to install backdoor programs, giving the hackers control of the victims' PCs, Armorize said.
The sites display a dialogue box informing the visitor that malware had been detected and provided a link to the HDDPlus website. This is a known fake optimisation tool which is a Trojan fronting the malicious software.
Armorize said that once the visitor arrived at the site they were immediately infected so that even rebooting would not remove the warning dialogue.
This vulnerability is a known one so anyone with up-to-date antivirus products should be secured.
The first attack occurred on Sunday December 5 and lasted for a few days. Google said that it had experienced some issues with the DoubleClick Ad Exchange that it uses. The company claims that the ads were identified and blocked "within seconds".
Microsoft may have been affected more severely as several reports indicate that malicious ads were found on the LiveMail (formerly Hotmail) site.
The Maladvertisers used a new trick by showing their adds as being from AdShufffle which adds an extra f' to the acceptable AdShuffle domain. Even so, it reveals a weakness that should not have been there and the ads should not have been accepted, security analysts said.
"If anyone was going to be on top of such issues, we would hope it would be Microsoft and Google," commented Bob Tarzey, analyst and director of Quocirca. "It is not just one of those things; there is a lot at stake, if the biggest web brands are not able to protect themselves, who can?
"Google and Microsoft need to take urgent action here. There is still a disproportionate underspend on web advertising, so there is lots of upside, but to tap that confidence in the web-mega brands needs to be maintained. This is especially an issue for Google, which is still very heavily reliant on revenue from click through ads."
It seems that Google's DoubleClick team are on the ball, however. Huang said, "We reached out to DoubleClick and in less than a few hours' time they arranged a meeting with a group of their experts on anti-malvertising and incidence response. We were very surprised and impressed with the speed that DoubleClick acted. We provided details, and DoubleClick said they were already on top of the issue."
Mirosoft said it, too, will seek information from Armorize.
Unleashing the power of AI initiatives with the right infrastructure
What key infrastructure requirements are needed to implement AI effectively?Download now
Achieve today. Plan tomorrow. Making the hybrid multi-cloud journey
A Veritas webinar on implementing a hybrid multi-cloud strategyDownload now
A buyer’s guide for cloud-based phone solutions
Finding the right phone system for your modern businessDownload now
The workers' experience report
How technology can spark motivation, enhance productivity and strengthen securityDownload now