For Immediate Release:
Dateline: Boston,
MA
Friday, August 19, 2016
Malevolent advertising is called malvertising. The “ad” is placed on a website by cybercriminals who want control of your computer for financial gain.  And the real scary thing about malvertising is that these trick-ads have appeared on trusted, popular websites like the Weather Network, BBC, NFL and the New York Times.
Oh, and it gets worse: The malicious ad can be hidden, unseen by the site visitor, thanks to a special html code that allows the bad ad to be inside legitimate content. This trick-code is usually hidden in what are called iframes—without affecting the rest of the site appearance. The type of cybercriminal who succeeds at this needs to be patient and clever. - Legitimate advertisers place their ads with ad networks, bidding for ad placement.
- Ad networks, which handle the bidding, serve the ads to websites.
- Crooks may place legitimate ads with these networks to gain a good reputation, or, crooks run networks.
- After building trust with placement of legit ads, the crooks graduate to ad placement on high traffic sites, and then they put in their malicious code in the iframes: malvertisements.
- When you’re on one of these infected pages, the ad will release malware to your computer that can do a whole host of damage.
What to do? - Keep all your software and systems up to date.
- Install an ad blocker, but be judicious, because ad blockers can disrupt the presentation of some sites, e.g., blocking some content, not just the ads. You may not mind this inconvenience, but also realize that an ad blocker will not block every malvertisement, either.
- Install antivirus software or an anti-exploit kit that will snuff out exploit kits, a favorite tool of the malvertiser.
- Exploit kits prowl your computer for vulnerabilities, and the right software will detect and neutralize them.
- Uninstall browser plugins you have no use for, especially if they’re the vulnerable Adobe Flash and Java.
- Set the remaining plugins to click to play, which will give you the option to run a plugin when a site you’re visiting wants to load one.
Robert Siciliano CEO of IDTheftSecurity.com, personal security and identity theft expert and speaker is the author of 99 Things You Wish You Knew Before Your Identity Was Stolen. See him knock’em dead in this identity theft prevention video. About the Author
ROBERT SICILIANO, CEO of IDTheftSecurity.com is fiercely committed to informing, educating, and empowering Americans so they can be protected from violence and crime in the physical and virtual worlds. His "tell it like it is" style is sought after by major media outlets, executives in the C-Suite of leading corporations, meeting planners, and community leaders to get the straight talk they need to stay safe in a world in which physical and virtual crime is commonplace. Siciliano is accessible, real, professional, and ready to weigh in and comment at a moment's notice on breaking news. Similar Posts- What is a “Drive-By” Download?
Gone are the days when you had to click to “accept” a download or install a software update in order to become infected. Now, just opening a compromised web page could allow dangerous code to install on your device. You just need to visit or “drive by” a web page, without stopping to click or accept - Business Identity Theft; Big Brands, Big Problems
Cyber criminals go after brand names like vultures, infiltrating company websites, hijacking mobile applications and tainting online ads, among other tricks. Some corporate websites aren’t as secure as business leaders think they are—and cyber thieves know this. They use the “watering hole” technique to infiltrate the system. Ever see an animal TV show in which the - What is malware and why should I be concerned?
“Malware” is a shortened version of the words malicious software. It is defined as: a generic term used to describe any type of software or code specifically designed to exploit a computer/mobile device or the data it contains, without consent. Most malware is designed to have some financial gain for the cybercriminal. Whether they are seeking - OSHA First Aid Kit for Small Businesses
OSHA’s Occupational Safety and Health Standards business regulations requires first aid kits for certain types of businesses. However no matter the nature of your business, it is not unreasonable to have a basic first aid kit on hand. The following first aid kit list sets forth the minimally acceptable number and type of first-aid supplies for - What is a Computer Worm?
Worms. Most of us probably think of them as those squirmy invertebrates we dissected as a kid or found on the sidewalk after a storm. You might have used them as bait for fishing (not phishing), to pull a prank or have even eaten them (no judgment). Whether you like worms or not, there’s one kind
|