Spyware
The ads use a tactic known as 'scan and scare'

Malicious ads target sports fans

Publishers thrown curveball by rogue security banners

Written by Shaun Nichols in California

A group peddling rogue antivirus software has duped several major websites into serving users with unwanted downloads.

Major League Baseball's MLB.com, the National Hockey League's NHL.com, and the website for business magazine The Economist have all fallen victim.

Security researcher Roger Thompson from Exploit Prevention Labs demonstrated the ads, which have since been removed, in a video hosted on YouTube.

The video shows the advertisements 'hijacking' the browser to direct the user away from the original site and attempt to perform an unsolicited software download and installation.

The ads use a tactic known as 'scan and scare'. The user is offered a free system scan which returns misleading results in an attempt to scare the user into paying for the software.

'Scan and scare' is a favourite among rogue security vendors that sell intentionally ineffective or malicious security software.

The ads were first believed to be coming from the DoubleClick network, although the company has since been cleared of any blame.

Researchers claim that the sites were contacted directly by the advertisers, who then managed the ads through DoubleClick's Dart ad-serving system.

The malicious Flash files contain code which redirects traffic from the host, past DoubleClick's servers and to a site which tries to serve the unwanted download.

DoubleClick said in a statement provided to vnunet.com that it is updating its system to track down and remove the malicious ads.

"Unfortunately, there are bad actors who misrepresent themselves and purchase advertising as an avenue to distribute malware," said the company. "We are going to continue to take proactive and reactive steps."

DoubleClick recommends that publishers carefully research prospective advertisers and keep a close eye on the behaviour of banner ads.

DoubleClick is hardly alone in the struggle to block out malicious and intrusive ads. Ad vendors and researchers have long warned that rogue security vendors use so-called 'bait and switch' techniques to swap out normal ads with malicious files.

This has resulted in an ongoing cat-and-mouse game in which malware vendors adopt new techniques to stay ahead of the screening systems used by the advertising networks.

Tags:

Further reading

Five million malware sites exposed in October

Comet Cursor tops Webroot threat list   More...

Cyber-criminals launch PDF malware offensive

PDFex storms into the charts   More...

Hackers can 'wreak havoc' with zero byte scripts

An oldie but a goldie   More...

Related articles

Malicious ads infect Expedia and Rhapsody

Flash banners used to spread malware   More...

Cyber-attack launched from 10,000 web pages

Unsuspecting surfers redirected to site laden with malware   More...

Multimedia malware strikes P2P users

New attack focuses on music and video files   More...

Cyber-crooks target chat platforms

Unique threats soar in 2007   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

24 Jul 2008

3.68 MBSpammer jailed, Esquire e-cover, and network passwords More...

23 Jul 2008

2.99 MBSmall time security, official 'spying' requests and a spammer jail break More...

22 Jul 2008

3.22 MBSat-nav crashes, open source security and female gamers More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Credit card transaction

Credit card fraud rampant in the UK

Attempted frauds go unreported and ignored, analysts claim   More...

Intel

Intel rolls out new embedded line-up

System-on-a-chip offerings promise footprint and power saving   More...

Advertisement

Network cables

Tech giants collaborate on wireless HD

Another attempt at cable-free transmission in the home   More...

iPhone fever fills AT&T coffers

US provider cashes in on Apple smartphone   More...

Advertisement